CVE-2022-27239

pam_cifscreds: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from t...

CVE-2022-27239 is fixed in 7 products on 1 platform, first by DEBIAN-CVE-2022-27239, released April 27, 2022. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0058
47th percentile

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
cifs-utils · Debian 11.6 (bullseye) 2:6.11-3.1+deb11u1 DSA-5157-1 Jun 3, 2022
cifs-utils · Debian 12.15 (bookworm) 2:6.14-1.1 DEBIAN-CVE-2022-27239 Apr 27, 2022
cifs-utils · Debian 13.5 (trixie) 2:6.14-1.1 DEBIAN-CVE-2022-27239 Apr 27, 2022
cifs-utils · Debian 14 2:6.14-1.1 DEBIAN-CVE-2022-27239 Apr 27, 2022
cifs-utils · RHEL 8 0:7.0-1.el8 RHBA-2023:3052 May 16, 2023
cifs-utils · Ubuntu 18.04.6 LTS (bionic) 2:6.8-1ubuntu1.2 cifs-utils 2:6.8-1ubuntu1.2 Apr 27, 2022
cifs-utils · Ubuntu 20.04 LTS (focal) 2:6.9-1ubuntu0.2 cifs-utils 2:6.9-1ubuntu0.2 Apr 27, 2022
cifs-utils · Ubuntu 22.04.1 LTS (jammy) 2:6.14-1ubuntu0.1 cifs-utils 2:6.14-1ubuntu0.1 Apr 27, 2022
cifs-utils · amzn 2023 6.15-1.amzn2023.0.2 ALAS2023-2024-530 Feb 15, 2024
cifs-utils-debuginfo · amzn 2023 6.15-1.amzn2023.0.2 ALAS2023-2024-530 Feb 15, 2024
cifs-utils-debugsource · amzn 2023 6.15-1.amzn2023.0.2 ALAS2023-2024-530 Feb 15, 2024
cifs-utils-devel · RHEL 8 0:7.0-1.el8 RHBA-2023:3052 May 16, 2023
cifs-utils-devel · amzn 2023 6.15-1.amzn2023.0.2 ALAS2023-2024-530 Feb 15, 2024
cifs-utils-info · amzn 2023 6.15-1.amzn2023.0.2 ALAS2023-2024-530 Feb 15, 2024
pam_cifscreds · RHEL 8 0:7.0-1.el8 RHBA-2023:3052 May 16, 2023
pam_cifscreds · amzn 2023 6.15-1.amzn2023.0.2 ALAS2023-2024-530 Feb 15, 2024
pam_cifscreds-debuginfo · amzn 2023 6.15-1.amzn2023.0.2 ALAS2023-2024-530 Feb 15, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.