PT-2026-114115 · Sahlberg · Libsmb2
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2 decode file fs volume info and smb2 decode file fs attribute info that allows malicious SMB servers to read past reply buffers. Attackers controlling a server or intercepting unsigned sessions can send crafted QUERY INFO replies with missing or oversized name lengths to crash the client.
Exploit
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Libsmb2