Debian/libsmb2: high 7.5
libsmb2 6.2+ is vulnerable to Buffer Overflow. When processing SMB2 chained PDUs (NextCommand), libsmb2 repeatedly calls smb2_add_iovector() to append to a fixed-size iovec array without checking the
Action: Upgrade libsmb2 to 6.2+dfsg-2+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.2+dfsg-2+deb13u1 | - |
Fixed versions
| 6.2+dfsg-2+deb13u1 |
Sources
published · modified · JSON