network block device project network block device vulnerabilities and exploits

(subscribe to this query)

In nbd-server in nbd prior to 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBD_OPT_INFO or NBD_OPT_GO message with an large value as the length of the name.

Network Block Device Project Network Block Device Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36

In nbd-server in nbd prior to 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists ...

Network Block Device Project Network Block Device Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36

Multiple Cisco products are affected by a vulnerability in Snort rules that could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on an affected device.The vulnerability is due to improper handling of the Block with Reset or Interactiv...

Cisco Firepower Threat Defense Cisco Firepower Management Center 3.1.0.1 Snort Snort

Multiple vulnerabilities in PWLib prior to 1.6.0 allow remote malicious users to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

Openh323 Project Pwlib

Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU prior to 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.

Qemu Qemu Fedoraproject Fedora 21 Fedoraproject Fedora 22 Fedoraproject Fedora 23 Arista Eos 4.12 Arista Eos 4.13 Arista Eos 4.14 Arista Eos 4.15

Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel up to and including 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to cre...

Linux Linux Kernel 3.9.0 Linux Linux Kernel 3.9.2 Linux Linux Kernel 3.9 Linux Linux Kernel 3.9.3 Linux Linux Kernel Linux Linux Kernel 3.9.1

Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and previous versions allows physically proximate malicious users to cause a denial of service (OOPS) or possibly have unspecified other impact via a crafted size of the EFI ...

The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel prior to 2.6.39.1 does not properly handle memory allocation for non-initial fragments, which might allow local users to conduct buffer overflow attacks, and gain privileges or obtain sensitive information, via ...

Linux Linux Kernel 2.6.39 Linux Linux Kernel

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook