ROS-20220329-04

Vulnerability in nbd network block device implementation, related to stack-based buffer overflow during
NBD_OPT_INFO or NBD_OPT_GO messages. Exploitation of the vulnerability could allow an attacker,
acting remotely and not authenticated, to pass specially crafted data to an application, causing a buffer overflow.
application, cause a stack-based buffer overflow, and execute arbitrary code on the target system

Vulnerability in nbd network block device implementation, related to integer overflow during processing of
NBD_OPT_INFO, NBD_OPT_GO and NBD_OPT_EXPORT_NAME messages. Exploitation of the vulnerability could allow
an attacker acting remotely to pass specially crafted data to an application, cause an integer overflow, and perform an
integer overflow and execute arbitrary code on the target system