CVE-2023-52434 smb: client: fix potential OOBs in smb2_parse_contexts()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Addresses Vulnerabilities in SMB Client Microsoft has published information on two vulnerabilities affecting the SMB client. CVE-2023-52434, published on February 20, 2024, addresses potential out-of-bounds issues in the smb2_parse_contexts() function. Additionally, CVE-2024-46796, published on September 18, 2024, resolves a double put issue in the smb2_set_path_size() function. 2 sources 41