CVE-2015-0847

nbd-server.c in Network Block Device nbd-server before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service deadlock via unspecified vectors...

nbd: denial of service

Signal handlers themselves were entered only once, but they called posixly unsafe, non-reentrant functions, such as syslog. If a signal was caught in the middle of the execution of such function, consequences were undefined. In practice, nbd-server was observed to deadlock during the execution of...

Debian DSA-3271-1 : nbd - security update

Tuomas Rasanen discovered that unsafe signal handling in nbd-server, the server for the Network Block Device protocol, could allow remote attackers to cause a deadlock in the server process and thus a denial of service. Tuomas Rasanen also discovered that the modern-style negotiation was carried...

[BSA-106] Security Update for nbd

Wouter Verhelst uploaded new packages for nbd which fixed the following security problems: CVE-2015-0847 Tuomas Räsänen discovered that nbd-server unsafe signal handling in nbd-server, the server for the Network Block Device protocol, could allow remote attackers to cause a deadlock in the server...

[SECURITY] [DSA 3271-1] nbd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3271-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 23, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3271-1 (nbd - security update)

Tuomas Rsnen discovered that unsafe signal handling in nbd-server, the server for the Network Block Device protocol, could allow remote attackers to cause a deadlock in the server process and thus a denial of service. Tuomas Rsnen also discovered that the modern-style negotiation was carried out ...

PT-2015-3589 · Nbd +2 · Nbd-Server +2

Name of the Vulnerable Software and Affected Versions: nbd-server versions 2.9.22 through 3.3 Description: The issue in nbd-server allows remote attackers to cause a denial of service by either closing the connection during negotiation or specifying a name for a non-existent export, which can lea...

PT-2015-4914 · Nbd +2 · Nbd-Server +2

Name of the Vulnerable Software and Affected Versions: nbd-server versions prior to 3.11 Description: The issue is related to the improper handling of signals in nbd-server.c, which can be exploited by remote attackers to cause a denial of service deadlock via unspecified vectors. Recommendations...

DSA-3271-1 nbd - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3271-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-223-1 : nbd security update

A vulnerability has been discovered in nbd-server, the server for the Linux Network Block Device. CVE-2015-0847 Tuomas Rsnen discovered that unsafe signal handling is present in nbd-server. This vulnerability could be exploited by a remote client to cause a denial of service. For the oldoldstable...

[SECURITY] [DLA 223-1] nbd security update

Package : nbd Version : 1:2.9.16-8+squeeze2 CVE ID : CVE-2015-0847 Debian Bug : 784657 A vulnerability has been discovered in nbd-server, the server for the Linux Network Block Device. CVE-2015-0847 Tuomas Räsänen discovered that unsafe signal handling is present in nbd-server. This vulnerability...

DLA-223-1 nbd - security update

Bulletin has no description...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the nbd-server package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the nbd-client package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Fedora 21 : libvirt-1.2.9.2-1.fc21 (2015-1892)

Rebased to version 1.2.9.2 - CVE-2014-8131: deadlock and segfault in qemuConnectGetAllDomainStats bz 1172571 - CVE-2015-0236: missing ACL check for the VIRDOMAINXMLSECURE flag in save images and snapshots objects bz 1185769 - CVE-2014-8136: local denial of service in qemu/qemudriver.c bz 1176179...

Threat Outbreak Alert RuleID13456: Email Messages Distributing Malicious Software on February 6, 2015

Medium Alert ID: 37380 First Published: 2015 February 6 21:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13456 may contain the following files: Name |...

openSUSE Security Update : kernel (openSUSE-SU-2012:1330-1)

This kernel update to 3.4.11 fixes various bugs and security issues. The changes up to 3.4.11 contain both security and bugfixes and are not explicitly listed here. Following security issues were fixed: CVE-2012-3520: Force passing credentials, otherwise local services could be fooled to assume...

openSUSE Security Update : nbd (openSUSE-SU-2011:0193-2)

Nbd was updated to fix a buffer overflow in the mainloop function of nbd-server.c. This vulnerability can be exploited by remote attackers via long requests to execute arbitrary code. CVE-2011-0530: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 %NASLMINLEVEL 70300 C...

openSUSE Security Update : nbd (nbd-4031)

Nbd was updated to fix a buffer overflow in the mainloop function of nbd-server.c. This vulnerability can be exploited by remote attackers via long requests to execute arbitrary code. CVE-2011-0530: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 %NASLMINLEVEL 70300 C...