PT-2017-18579 · Smb4K+2 · Smb4K+2

Stealth · Publicado 2017-05-17 · Atualizado 2026-03-13 · CVE-2017-8849

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions smb4k versions prior to 2.0.1

Description The issue allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.

Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2017-1634

CVE-2017-8849

DLA-1002-1

DSA-3951-1

MGASA-2017-0171

OPENSUSE-SU-2017_1343-1

OPENSUSE-SU-2026:10370-1

Produtos afetados

Alt Linux

Suse

Smb4K

Referências · 24

• 🔥 https://exploit-db.com/exploits/42053 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2017/05/10/3 · Exploit
• http://securityfocus.com/bid/98737 · Nota
• https://osv.dev/vulnerability/DSA-3951-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-8849 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-8849 · Nota
• http://securityfocus.com/bid/98690 · Nota
• https://kde.org/info/security/advisory-20170510-2.txt · Nota
• https://security.gentoo.org/glsa/201705-14 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2017-0171.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2017-0171 · Aviso do Fabricante
• http://debian.org/security/2017/dsa-3951 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-8849 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-8849 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-66002 · Nota