Description (CNA)
Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SUSE / kernel: | affected kernel version 4.9.0 |
CWE
CWE-22
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10220
- https://security.netapp.com/advisory/ntap-20200103-0001/
- https://usn.ubuntu.com/4226-1/
- https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
- https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
ADP enrichment
No English description supplied.