CVE-2017-8849

Published: May 17, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.

Affected (2)

Products: Smb4k Project: Smb4k · Debian: Debian Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Smb4k Project Smb4k	Up to 2.0.0

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (20)

http://www.debian.org/security/2017/dsa-3951

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2017/05/10/3

Source: cve@mitre.org

ExploitMailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/98690

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/98737

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1449656

Source: cve@mitre.org

Issue TrackingPatchThird Party AdvisoryVDB Entry

https://cgit.kde.org/smb4k.git/commit/?id=71554140bdaede27b95dbe4c9b5a028a83c83cce

Source: cve@mitre.org

PatchThird Party Advisory

https://cgit.kde.org/smb4k.git/commit/?id=a90289b0962663bc1d247bbbd31b9e65b2ca000e

Source: cve@mitre.org

PatchThird Party Advisory

https://security.gentoo.org/glsa/201705-14

Source: cve@mitre.org

Third Party Advisory

https://www.exploit-db.com/exploits/42053/

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://www.kde.org/info/security/advisory-20170510-2.txt

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2017/dsa-3951