Lucene search

K
osvGoogleOSV:CVE-2023-5215
HistorySep 28, 2023 - 2:15 p.m.

CVE-2023-5215

2023-09-2814:15:26
Google
osv.dev
7
libnbd
server
block size
nbd spec
application crash
unintended behavior
nbd clients

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

10.3%

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-bit unsigned value). This issue could lead to an application crash or other unintended behavior for NBD clients that doesn’t treat the return value of the nbd_get_size() function correctly.