DEBIAN-CVE-2025-57632

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2025-57632

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-57632.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2025-57632

Upstream

CVE-2025-57632

Published

2025-09-25T20:15:35.237Z

Modified

2025-11-20T10:18:25.836423Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

libsmb2 6.2+ is vulnerable to Buffer Overflow. When processing SMB2 chained PDUs (NextCommand), libsmb2 repeatedly calls smb2addiovector() to append to a fixed-size iovec array without checking the upper bound of v->niov (SMB2MAXVECTORS=256). An attacker can craft responses with many chained PDUs to overflow v->niov and perform heap out-of-bounds writes, causing memory corruption, crashes, and potentially arbitrary code execution. The SMB2OPLOCKBREAK path bypasses message ID validation.

References

https://security-tracker.debian.org/tracker/CVE-2025-57632

Affected packages

Debian:13 / libsmb2

Package

Name: libsmb2
Purl: pkg:deb/debian/libsmb2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.2+dfsg-2+deb13u1

Affected versions

6.*

6.2+dfsg-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-57632.json"

Debian:14 / libsmb2