Published: 22/02/2011 Updated: 17/08/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) prior to 2.9.20 might allow remote malicious users to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wouter verhelst nbd 2.9.14
wouter verhelst nbd 2.9.15
wouter verhelst nbd 2.9.7
wouter verhelst nbd 2.9.8
wouter verhelst nbd 2.9.0
wouter verhelst nbd
wouter verhelst nbd 2.9.11
wouter verhelst nbd 2.9.12
wouter verhelst nbd 2.9.2
wouter verhelst nbd 2.9.5
wouter verhelst nbd 2.9.18
wouter verhelst nbd 2.9.13
wouter verhelst nbd 2.9.6
wouter verhelst nbd 2.9.4
wouter verhelst nbd 2.9.1
wouter verhelst nbd 2.9.16
wouter verhelst nbd 2.9.17
wouter verhelst nbd 2.9.10
wouter verhelst nbd 2.9.9
wouter verhelst nbd 2.9.3

Debian Bug report logs - #611187 nbd-server dies due to EFAULT from read Package: nbd-server; Maintainer for nbd-server is Wouter Verhelst <wouter@debianorg>; Source for nbd-server is src:nbd (PTS, buildd, popcon) Reported by: Ian Jackson <IanJackson@eucitrixcom> Date: Wed, 26 Jan 2011 15:03:02 UTC Severity: ser ...

An attacker could send crafted input to NBD and cause it to crash or to run arbitrary programs ...

It was discovered a regression of a buffer overflow (CVE-2005-3534) in NBD, the Network Block Device server, that could allow arbitrary code execution on the NBD server via a large request For the oldstable distribution (lenny), this problem has been fixed in version 1:2911-3lenny1 The stable distribution (squeeze), the testing distribution (wh ...

CWE-119 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054083.html http://openwall.com/lists/oss-security/2011/01/31/7 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611187 https://github.com/yoe/nbd/commit/3ef52043861ab16352d49af89e048ba6339d6df8 http://secunia.com/advisories/43353 https://bugzilla.redhat.com/show_bug.cgi?id=673562 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054071.html http://www.vupen.com/english/advisories/2011/0403 http://openwall.com/lists/oss-security/2011/01/28/3 http://www.securityfocus.com/bid/46572 http://www.vupen.com/english/advisories/2011/0582 http://www.debian.org/security/2011/dsa-2183 http://secunia.com/advisories/43610 https://hermes.opensuse.org/messages/8086846 http://security.gentoo.org/glsa/glsa-201206-35.xml http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html https://exchange.xforce.ibmcloud.com/vulnerabilities/65720 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611187 https://usn.ubuntu.com/1155-1/https://nvd.nist.gov

CVE-2011-0530

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect