{
  "document": {
    "aggregate_severity": {
      "text": "Medium"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/rhel7els/vex/2022/cve-2022-29869-els_os-rhel7els.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-10-20T04:35:32Z",
      "generator": {
        "date": "2026-10-20T04:35:32Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CVE-2022-29869-ELS_OS-RHEL7ELS",
      "initial_release_date": "2022-04-28T01:15:00Z",
      "revision_history": [
        {
          "date": "2022-04-28T01:15:00Z",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-20T04:35:32Z",
          "number": "2",
          "summary": "Official Publication"
        }
      ],
      "status": "final",
      "version": "2"
    },
    "title": "Security update on CVE-2022-29869"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 7",
                "product": {
                  "name": "Red Hat Enterprise Linux 7",
                  "product_id": "Red-Hat-7",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:redhat:enterprise_linux:7:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:6.2-10.el7.0.5.x86_64",
                "product": {
                  "name": "cifs-utils-0:6.2-10.el7.0.5.x86_64",
                  "product_id": "cifs-utils-0:6.2-10.el7.0.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@6.2-10.el7.0.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:6.2-10.el7.0.5.x86_64",
                "product": {
                  "name": "cifs-utils-devel-0:6.2-10.el7.0.5.x86_64",
                  "product_id": "cifs-utils-devel-0:6.2-10.el7.0.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@6.2-10.el7.0.5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:6.2-10.el7.0.5.i686",
                "product": {
                  "name": "cifs-utils-0:6.2-10.el7.0.5.i686",
                  "product_id": "cifs-utils-0:6.2-10.el7.0.5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils@6.2-10.el7.0.5?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:6.2-10.el7.0.5.i686",
                "product": {
                  "name": "cifs-utils-devel-0:6.2-10.el7.0.5.i686",
                  "product_id": "cifs-utils-devel-0:6.2-10.el7.0.5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cifs-utils-devel@6.2-10.el7.0.5?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Red Hat, Inc."
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.x86_64",
                "product": {
                  "name": "cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.x86_64",
                  "product_id": "cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/cifs-utils@6.2-10.el7.0.5.tuxcare.els3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.x86_64",
                "product": {
                  "name": "cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.x86_64",
                  "product_id": "cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/cifs-utils-devel@6.2-10.el7.0.5.tuxcare.els3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.i686",
                "product": {
                  "name": "cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.i686",
                  "product_id": "cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/cifs-utils@6.2-10.el7.0.5.tuxcare.els3?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.i686",
                "product": {
                  "name": "cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.i686",
                  "product_id": "cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/cifs-utils-devel@6.2-10.el7.0.5.tuxcare.els3?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "TuxCare"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.x86_64"
        },
        "product_reference": "cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:6.2-10.el7.0.5.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.x86_64"
        },
        "product_reference": "cifs-utils-0:6.2-10.el7.0.5.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.i686 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.i686"
        },
        "product_reference": "cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.i686",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-0:6.2-10.el7.0.5.i686 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.i686"
        },
        "product_reference": "cifs-utils-0:6.2-10.el7.0.5.i686",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.x86_64"
        },
        "product_reference": "cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:6.2-10.el7.0.5.x86_64 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.x86_64"
        },
        "product_reference": "cifs-utils-devel-0:6.2-10.el7.0.5.x86_64",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.i686 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.i686"
        },
        "product_reference": "cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.i686",
        "relates_to_product_reference": "Red-Hat-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cifs-utils-devel-0:6.2-10.el7.0.5.i686 as a component of Red Hat Enterprise Linux 7",
          "product_id": "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.i686"
        },
        "product_reference": "cifs-utils-devel-0:6.2-10.el7.0.5.i686",
        "relates_to_product_reference": "Red-Hat-7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-29869",
      "cwe": {
        "id": "CWE-532",
        "name": "Insertion of Sensitive Information into Log File"
      },
      "notes": [
        {
          "category": "description",
          "text": "cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "known_affected": [
          "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.i686",
          "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.i686",
          "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.x86_64",
          "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.x86_64",
          "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.i686",
          "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.i686",
          "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.x86_64",
          "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2022-29869"
        },
        {
          "category": "external",
          "summary": "https://github.com/piastry/cifs-utils/commit/8acc963a2e7e9d63fe1f2e7f73f5a03f83d9c379",
          "url": "https://github.com/piastry/cifs-utils/commit/8acc963a2e7e9d63fe1f2e7f73f5a03f83d9c379"
        },
        {
          "category": "external",
          "summary": "https://github.com/piastry/cifs-utils/pull/7",
          "url": "https://github.com/piastry/cifs-utils/pull/7"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2022/05/msg00020.html",
          "url": "https://lists.debian.org/debian-lts-announce/2022/05/msg00020.html"
        },
        {
          "category": "external",
          "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WBOLMANBYJILXQKRRK7OCR774PXJAYY/",
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WBOLMANBYJILXQKRRK7OCR774PXJAYY/"
        },
        {
          "category": "external",
          "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXKZLJYJJEC3TIBFLXUORRMZUKG5W676/",
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXKZLJYJJEC3TIBFLXUORRMZUKG5W676/"
        },
        {
          "category": "external",
          "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/",
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/"
        },
        {
          "category": "external",
          "summary": "https://security.gentoo.org/glsa/202311-05",
          "url": "https://security.gentoo.org/glsa/202311-05"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2022/dsa-5157",
          "url": "https://www.debian.org/security/2022/dsa-5157"
        }
      ],
      "release_date": "2022-04-28T01:15:00Z",
      "remediations": [
        {
          "category": "no_fix_planned",
          "date": "2026-10-15T10:09:05.616191Z",
          "details": "This issue only manifests when mount.cifs is run with non-default verbose logging; in that mode, lines from a locally supplied file that isn’t a valid credentials file may be echoed to stderr, causing at most an on-host log disclosure. Exploitation requires influencing the credentials= path or mount options—actions that ordinarily require administrative control—and yields no code execution, privilege escalation, integrity change, or availability impact. Given these prerequisites and the strictly local leakage scope, it’s reasonable to deprioritize in centrally managed VM/server deployments.",
          "product_ids": [
            "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.i686",
            "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.i686",
            "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.x86_64",
            "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.x86_64",
            "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.i686",
            "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.i686",
            "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.x86_64",
            "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.i686",
            "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.i686",
            "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.tuxcare.els3.x86_64",
            "Red-Hat-7:cifs-utils-0:6.2-10.el7.0.5.x86_64",
            "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.i686",
            "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.i686",
            "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.tuxcare.els3.x86_64",
            "Red-Hat-7:cifs-utils-devel-0:6.2-10.el7.0.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    }
  ]
}