{"id":"CVE-2022-29869","details":"cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.","modified":"2026-08-12T13:01:01.961981Z","published":"2022-04-28T00:00:00Z","related":["SUSE-SU-2022:2801-1","SUSE-SU-2022:2802-1","SUSE-SU-2022:3525-1","openSUSE-SU-2022:2801-1"],"database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29869.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29869.json"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WBOLMANBYJILXQKRRK7OCR774PXJAYY/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXKZLJYJJEC3TIBFLXUORRMZUKG5W676/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29869"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202311-05"},{"type":"ADVISORY","url":"https://www.debian.org/security/2022/dsa-5157"},{"type":"FIX","url":"https://github.com/piastry/cifs-utils/commit/8acc963a2e7e9d63fe1f2e7f73f5a03f83d9c379"},{"type":"FIX","url":"https://github.com/piastry/cifs-utils/pull/7"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00020.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/piastry/cifs-utils","events":[{"introduced":"0"},{"fixed":"58ca03f183b375cb723097a241bc2fc2254dab21"},{"fixed":"8acc963a2e7e9d63fe1f2e7f73f5a03f83d9c379"}],"database_specific":{"cpe":"cpe:2.3:a:samba:cifs-utils:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"6.15"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["cifs-utils-6.14","cifs-utils-6.13","cifs-utils-6.12","cifs-utils-6.11","cifs-utils-6.10","cifs-utils-6.9","cifs-utils-6.8","cifs-utils-6.7","cifs-utils-6.6","cifs-utils-6.5","cifs-utils-6.4","cifs-utils-6.3","cifs-utils-6.2","cifs-utils-6.1","cifs-utils-6.0","cifs-utils-5.9","cifs-utils-5.8","cifs-utils-5.7","cifs-utils-5.6","cifs-utils-5.5","cifs-utils-5.4","cifs-utils-5.3","cifs-utils-5.2","cifs-utils-5.1","cifs-utils-5.0","cifs-utils-4.9","cifs-utils-4.8.1","cifs-utils-4.8","cifs-utils-4.7","cifs-utils-4.6","cifs-utils-4.5","cifs-utils-4.4","cifs-utils-4.3","cifs-utils-4.2","cifs-utils-4.1","cifs-utils-4.0","cifs-utils-4.0rc1","release-4-0a1","cifs-utils-4.0a1"],"database_specific":{"vanir_signatures_modified":"2026-08-12T13:01:01Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"91061460177468123754902069861250535461","length":1476},"id":"CVE-2022-29869-079112c6","signature_type":"Function","signature_version":"v1","source":"https://github.com/piastry/cifs-utils/commit/8acc963a2e7e9d63fe1f2e7f73f5a03f83d9c379","target":{"function":"open_cred_file","file":"mount.cifs.c"}},{"target":{"file":"mount.cifs.c"},"deprecated":false,"digest":{"line_hashes":["333177565664066831031052731575158110766","269008431299318842638218154133802989812","200416903659751381251677829170609985397","142948789842139240547537937641208830596","44912368005009940171336540415324128652","157149416689637315031584410539095472663","83440183529970733472400725653080485434","172559212895684826899817295477533425772","151755585470736387165767965852064864571","318376024910814506234711884201024569379","1076006348340887466461663850527154898","247924530577808540089783321436504017021","345905160297107181876084015619107312","94278264940853492957148186831503439599"],"threshold":0.9},"id":"CVE-2022-29869-308c8667","signature_type":"Line","signature_version":"v1","source":"https://github.com/piastry/cifs-utils/commit/8acc963a2e7e9d63fe1f2e7f73f5a03f83d9c379"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29869.json"}}],"schema_version":"1.9.0"}