CVE-2019-10220: high-severity vulnerability in SUSE kernel:
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8epss 5.1%
In short
The Linux kernel's CIFS (file sharing protocol) implementation has a flaw that allows attackers to manipulate directory paths, potentially accessing files they shouldn't be able to reach. This happens when the system doesn't properly validate relative paths in file listings.
Technical detail
A path traversal vulnerability in the Linux kernel's CIFS client (v4.9.0) fails to properly sanitize relative path components in directory entry lists, allowing an attacker with access to a malicious CIFS server to traverse the directory structure and read or write arbitrary files on the client system.
Summary generated and translated by AI from the official description.
Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
SUSE · kernel: