CVE-2025-47711

There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error,...

CVE-2025-47712

Summary: CVE-2025-47712 affects the nbdkit blocksize filter. A crafted client request for block status over a very large data range can trigger an internal error in nbdkit, causing a denial of service. The initial description does not specify affected versions, product variants, or official remed...

CVE-2025-47712 Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service...

CVE-2025-47712 Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service...

CVE-2025-47712

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service...

Libguestfs nbdkit 安全漏洞

Libguestfs nbdkit is an application from the Libguestfs community for creating NBD Protocol for Accessing Network Block Devices servers. A security vulnerability exists in Libguestfs nbdkit that stems from an internal error in handling plugin responses, which could lead to a denial of service...

Libguestfs nbdkit 输入验证错误漏洞

Libguestfs nbdkit is an application from the Libguestfs community for creating NBD Protocol for Accessing Network Block Devices servers. An input validation error vulnerability exists in Libguestfs nbdkit, which stems from an internal error in the processing of a specific client request and could...

Fedora 42 : nbdkit (2025-8a2d82f65a)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8a2d82f65a advisory. New upstream stable branch version 1.42.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

[SECURITY] Fedora 41 Update: nbdkit-1.40.6-1.fc41

NBD is a protocol for accessing block devices hard disks and disk-like things over the network. nbdkit is a toolkit for creating NBD servers. The key features are: Multithreaded NBD server written in C with good performance. Minimal dependencies for the basic server. Liberal license BSD allows...

Fedora: Security Advisory (FEDORA-2025-8a2d82f65a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : nbdkit (2025-bc02ec32fb)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-bc02ec32fb advisory. New upstream stable branch version 1.40.6 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

Fedora: Security Advisory (FEDORA-2025-bc02ec32fb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 42 Update: nbdkit-1.42.3-1.fc42

NBD is a protocol for accessing block devices hard disks and disk-like things over the network. nbdkit is a toolkit for creating NBD servers. The key features are: Multithreaded NBD server written in C with good performance. Minimal dependencies for the basic server. Liberal license BSD allows...

nbdkit-1.42.3-1.1 on GA media (moderate)

nbdkit-1.42.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15088-1 Rating: moderate Cross-References: CVE-2025-47711 CVE-2025-47712 CVSS scores: CVE-2025-47711 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2025-47711 SUSE : 7.1...

OPENSUSE-SU-2025:15088-1 nbdkit-1.42.3-1.1 on GA media

These are all security issues fixed in the nbdkit-1.42.3-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2025-47711

There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error,...

SUSE CVE-2025-47712

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service...

nbdkit bug fix and enhancement update

An update is available for nbdkit. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.5...

Linux Distros Unpatched Vulnerability : CVE-2021-3716

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a...

Linux Distros Unpatched Vulnerability : CVE-2019-14850

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and cause it to perform a...