CVE-2017-8849
HighSummary
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.
Risk Assessment
Organizations may be exposed to unauthorized access to systems, potentially leading to serious security breaches.
Recommendation
It is recommended to update smb4k to version 2.0.1 or later to mitigate this vulnerability.
Other vulnerabilities in smb4k
See all- CVE-2025-66003High
An External Control of File Name or Path vulnerability in smb4k before version 4.0.5 allows local users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba share.
- CVE-2025-66002Medium
An improper neutralization of argument delimiters in a command (Argument Injection) vulnerability allows local users to perform arbitrary unmounts via the smb4k mount helper.
Original NVD description (English source)
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS