Debian/libsmb2: high 7.5
libsmb2 6.2+ is vulnerable to Buffer Overflow. When processing SMB2 chained PDUs (NextCommand), libsmb2 repeatedly calls smb2_add_iovector() to append to a fixed-size iovec array without checking the
Action: Upgrade libsmb2 to 6.2+dfsg-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.2+dfsg-3 | - |
Fixed versions
| 6.2+dfsg-3 |
Sources
- osv: DEBIAN-CVE-2025-57632#Debian:14/libsmb2
- https://security-tracker.debian.org/tracker/CVE-2025-57632
published · modified · JSON