An attacker could send crafted input to NBD and cause it to crash or to run arbitrary programs.
It was discovered that NBD incorrectly handled certain long requests. A remote attacker could use this flaw to cause NBD to crash, resulting in a denial of service, or possibly execute arbitrary code.
21 June 2011
A security issue affects these releases of Ubuntu and its derivatives:
An attacker could send crafted input to NBD and cause it to crash or to run arbitrary programs.
It was discovered that NBD incorrectly handled certain long requests. A remote attacker could use this flaw to cause NBD to crash, resulting in a denial of service, or possibly execute arbitrary code.
The problem can be corrected by updating your system to the following package versions:
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
After a standard system update you need to restart NBD to make all the necessary changes.
Vulmon