CVE-2014-2830 Memory corruption in n/a

Critical 10.0 Published 31 Mar 2015 Updated 6 Aug 2024

A stack-based buffer overflow in cifs-utils allows remote attackers to cause unspecified impacts, potentially leading to code execution or denial of service.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Not stated
Victim action needed: Not stated
Fix: Available

What is CVE-2014-2830?

CVE-2014-2830 is a critical memory corruption vulnerability in n/a, published on 31 Mar 2015.

Official description

Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors.

Weakness: CWE-119

Which versions are affected by CVE-2014-2830?

It affects 1 product.

Products include Debian Cifs-Utils.

How do I fix CVE-2014-2830?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2014-2830 being exploited?

There is no known exploitation of CVE-2014-2830 in the wild and no public exploit code.

CVE-2012-1586 Information disclosure in n/a Low 2.1

Sources

Also known as DEBIAN-CVE-2014-2830, ECHO-9cf0-966b-4f31, GHSA-88m7-qhcf-97c3, MGASA-2014-0242.