Lucene search
+L

839 matches found

OpenVAS
OpenVAS
•added 2020/01/09 12:00 a.m.•21 views

Fedora Update for nbdkit FEDORA-2019-a75665981b

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2019/12/10 9:57 p.m.•22 views

CVE-2019-14842

A bounds check vulnerability was found in libnbd's structured reply feature where the check was supposed to test for chunk offsets smaller than the beginning of the request but did not work because of signed/unsigned confusion. Structured reply is a feature of the newstyle NBD protocol allowing t...

9.8CVSS3AI score0.01848EPSS
SaveExploits0References4
NVD
NVD
•added 2019/11/26 4:15 p.m.•15 views

CVE-2019-14842

Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than the beginning of the request did not work because of signed/unsigned confusion. If one of these chunks contains a...

9.8CVSS8.9AI score0.01848EPSS
SaveExploits0References2
OSV
OSV
•added 2019/11/26 4:15 p.m.•21 views

CVE-2019-14842

Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than the beginning of the request did not work because of signed/unsigned confusion. If one of these chunks contains a...

9.8CVSS7.8AI score
SaveExploits0References2
Prion
Prion
•added 2019/11/26 4:15 p.m.•16 views

Type confusion

Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than the beginning of the request did not work because of signed/unsigned confusion. If one of these chunks contains a...

7.5CVSS9.8AI score0.01848EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2019/11/26 4:15 p.m.•25 views

CVE-2019-14842

Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than the beginning of the request did not work because of signed/unsigned confusion. If one of these chunks contains a...

9.8CVSS7.2AI score0.01848EPSS
SaveExploits0References5
Mend
Mend
•added 2019/11/26 3:01 p.m.•1 views

CVE-2019-14842

Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than the beginning of the request did not work because of signed/unsigned confusion. If one of these chunks contains a...

9.8CVSS0.01848EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2019/11/26 3:01 p.m.•22 views

CVE-2019-14842

Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than the beginning of the request did not work because of signed/unsigned confusion. If one of these chunks contains a...

7.3CVSS9.9AI score0.01848EPSS
SaveExploits0References2
CVE
CVE
•added 2019/11/26 3:01 p.m.•117 views

CVE-2019-14842

CVE-2019-14842 is a memory-safety fault in the NBD protocol handling (Structured reply feature). The issue arises from a signed/unsigned mismatch in a bounds check for chunk offsets in the server’s reply path; a chunk with a negative offset can cause data to be written outside the intended read b...

9.8CVSS9.7AI score0.01848EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2019/11/26 3:01 p.m.•19 views

CVE-2019-14842

Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than the beginning of the request did not work because of signed/unsigned confusion. If one of these chunks contains a...

9.8CVSS7.4AI score0.01848EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2019/11/26 12:00 a.m.•9 views

PT-2019-13855 · Nbd · Nbd

Name of the Vulnerable Software and Affected Versions: nbd affected versions not specified Description: The issue is related to the Structured reply feature of the newstyle NBD protocol, which allows the server to send a reply in chunks. A bounds check error due to signed/unsigned confusion can...

9.8CVSS6.8AI score0.01848EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/26 12:00 a.m.•4 views

CVE-2019-14842: Incorrect Conversion between Numeric Types

Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than the beginning of the request did not work because of signed/unsigned confusion. If one of these chunks contains a...

9.8CVSS8.2AI score0.01848EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2019/10/19 12:00 a.m.•47 views

Fedora Update for libnbd FEDORA-2019-f6ea699dbb

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2019/10/19 12:00 a.m.•15 views

Fedora Update for libnbd FEDORA-2019-b1586544bb

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2019/10/18 4:54 p.m.•22 views

[SECURITY] Fedora 30 Update: libnbd-1.0.3-1.fc30

NBD =EF=BF=BD=EF=BF=BD=EF=BF=BD Network Block Device =EF=BF=BD=EF=BF=BD=EF =BF=BD is a protocol for accessing Block Devices hard disks and disk-like things over a Network. This is the NBD client library in userspace, a simple library for writing NBD clients. The key features are: Synchronous and...

0.7AI score
SaveExploits0
Fedora
Fedora
•added 2019/10/18 12:50 a.m.•19 views

[SECURITY] Fedora 29 Update: libnbd-1.0.3-1.fc29

NBD =EF=BF=BD=EF=BF=BD=EF=BF=BD Network Block Device =EF=BF=BD=EF=BF=BD=EF =BF=BD is a protocol for accessing Block Devices hard disks and disk-like things over a Network. This is the NBD client library in userspace, a simple library for writing NBD clients. The key features are: Synchronous and...

0.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/10/07 12:00 a.m.•28 views

Fedora 31 : libnbd (2019-ec2eedaa9e)

New upstream version 1.0.2. Contains fix for NBD Protocol Downgrade Attack CVE-2019-14842. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

9.8CVSS6.9AI score0.01848EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/10/03 12:00 a.m.•21 views

The vulnerability of the nbd_genl_status function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the nbdgenlstatus function drivers/block/nbd in the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created application...

4.4CVSS5.5AI score0.00387EPSS
SaveExploits0References25Affected Software1
OpenVAS
OpenVAS
•added 2019/10/01 12:00 a.m.•23 views

Fedora Update for nbdkit FEDORA-2019-1b30db2125

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2019/09/29 2:23 a.m.•28 views

[SECURITY] Fedora 29 Update: nbdkit-1.12.8-1.fc29

NBD is a protocol for accessing block devices hard disks and disk-like things over the network. nbdkit is a toolkit for creating NBD servers. The key features are: Multithreaded NBD server written in C with good performance. Minimal dependencies for the basic server. Liberal license BSD allows...

0.9AI score
SaveExploits0
Rows per page
Query Builder