diff --git a/pkgs/os-specific/linux/cifs-utils/default.nix b/pkgs/os-specific/linux/cifs-utils/default.nix
index ad136b811df8..d48e541abfe7 100644
--- a/pkgs/os-specific/linux/cifs-utils/default.nix
+++ b/pkgs/os-specific/linux/cifs-utils/default.nix
@@ -1,5 +1,5 @@
 { stdenv, fetchurl, autoreconfHook, docutils, pkgconfig
-, kerberos, keyutils, pam, talloc }:
+, kerberos, keyutils, pam, talloc, fetchpatch }:
 
 stdenv.mkDerivation rec {
   pname = "cifs-utils";
@@ -14,6 +14,14 @@ stdenv.mkDerivation rec {
 
   buildInputs = [ kerberos keyutils pam talloc ];
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2020-14342.patch";
+      url = "https://attachments.samba.org/attachment.cgi?id=16148";
+      sha256 = "1xw3d11wb1l8a89jhdp6hhy987nq0gafxfhx5jdhcc5nazahc7s4";
+    })
+  ];
+
   makeFlags = [ "root_sbindir=$(out)/sbin" ];
 
   meta = with stdenv.lib; {