Enterprise Storage vulnerabilities

2 known vulnerabilities in Enterprise Storage from SUSE. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Cifs-utils: Out-of-bounds Write

  CVE-2022-27239Apr 27, 2022Samba

  In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

• 7.8 High severity

  Red Hat Polkit Out-of-Bounds Read and Write Exploited

  CVE-2021-4034Jan 28, 2022PolkitEPSS 94.9%

  A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn