GSD-2022-1001425 nbd: fix possible overflow on 'first_minor' in nbd_dev_add()

nbd: fix possible overflow on 'firstminor' in nbddevadd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

PT-2022-29368

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to a possible overflow on the first minor variable in the nbd dev add function. This potential security issue was introduced in version v4.11 and is fixed in Linux Kernel...

PT-2022-30015

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to a possible overflow on 'first minor' in the nbd dev add function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29361

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to a possible overflow on 'first minor' in the nbd dev add function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29698

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a possible overflow on the first minor variable in the nbd dev add function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30021

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to a possible overflow on the first minor variable in the nbd dev add function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29692

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a possible overflow on 'first minor' in nbd dev add. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

openSUSE: Security Advisory for nbd (SUSE-SU-2022:1276-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:1276-1 Security update for nbd

This update for nbd fixes the following issues: - CVE-2022-26495: Fixed an integer overflow with a resultant heap-based buffer overflow bsc1196827. - CVE-2022-26496: Fixed a stack-based buffer overflow when parsing the name field by sending a crafted NBDOPTINFO bsc1196828. Update to version 3.24...

Denial Of Service (DoS)

libnbd is vulnerable to denial of service. The vulnerability exists when performing multi-threaded copies using asynchronous nbd calls which results in the silent creation of a corrupted destination image...

ROS-20220330-01

Vulnerability in the network block device implementation client library libnbd, related to the mechanism of error handling mechanism in the nbdcopy tool when executing multithreaded copies using asynchronous nbd nbd calls. Exploitation of the vulnerability could allow an attacker acting remotely ...

ROS-20220329-04

Vulnerability in nbd network block device implementation, related to stack-based buffer overflow during NBDOPTINFO or NBDOPTGO messages. Exploitation of the vulnerability could allow an attacker, acting remotely and not authenticated, to pass specially crafted data to an application, causing a...

Fedora: Security Advisory for nbd (FEDORA-2022-263873fb70)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for nbd (FEDORA-2022-807e431d5f)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2022-2047

Name of the Vulnerable Software and Affected Versions libnbd affected versions not specified Description The issue is related to the handling of exceptions in the nbdcopy tool of the libnbd library. When performing multi-threaded copies using asynchronous nbd calls, the tool may treat the...

Ubuntu: Security Advisory (USN-5323-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5100-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5323-1: NBD vulnerabilities

It was discovered that NBD incorrectly handled name length fields. A remote attacker could use this issue to cause NBD to crash, resulting in a denial of service, or possibly execute arbitrary code...

Ubuntu 18.04 LTS / 20.04 LTS : NBD vulnerabilities (USN-5323-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5323-1 advisory. It was discovered that NBD incorrectly handled name length fields. A remote attacker could use this issue to cause NBD to crash, resulting in...

Debian DSA-5100-1 : nbd - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5100 advisory. - In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field...