PT-2017-18579 · Smb4K+2 · Smb4K+2

Stealth · Published 2017-05-17 · Updated 2026-03-13 · CVE-2017-8849

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions smb4k versions prior to 2.0.1

Description The issue allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.

Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2017-1634

CVE-2017-8849

DLA-1002-1

DSA-3951-1

MGASA-2017-0171

OPENSUSE-SU-2017_1343-1

OPENSUSE-SU-2026:10370-1

Affected Products

Alt Linux

Suse

Smb4K

References · 24

• 🔥 https://exploit-db.com/exploits/42053 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2017/05/10/3 · Exploit
• https://osv.dev/vulnerability/DSA-3951-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-8849 · Security Note
• https://security.gentoo.org/glsa/201705-14 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0171.html · Security Note
• https://osv.dev/vulnerability/MGASA-2017-0171 · Vendor Advisory
• http://debian.org/security/2017/dsa-3951 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-8849 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-8849 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-8849 · Vendor Advisory
• https://cgit.kde.org/smb4k.git/commit/?id=71554140bdaede27b95dbe4c9b5a028a83c83cce · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=1449656 · Patch
• https://cve.org/CVERecord?id=CVE-2017-8849 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10370-1 · Vendor Advisory