NBD vulnerabilities

2015-07-2200:00:00

ubuntu.com

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.3 Medium

AI Score

Confidence

Low

0.042 Low

EPSS

Percentile

92.3%

JSON

Releases

Ubuntu 15.04
Ubuntu 14.10
Ubuntu 14.04 ESM
Ubuntu 12.04

Packages

nbd - Network Block Device protocol

Details

It was discovered that NBD incorrectly handled IP address matching. A
remote attacker could use this issue with an IP address that has a partial
match and bypass access restrictions. This issue only affected
Ubuntu 12.04 LTS. (CVE-2013-6410)

Tuomas Räsänen discovered that NBD incorrectly handled wrong export names
and closed connections during negotiation. A remote attacker could use this
issue to cause NBD to crash, resulting in a denial of service. This issue
only affected Ubuntu 12.04 LTS. (CVE-2013-7441)

Tuomas Räsänen discovered that NBD incorrectly handled signals. A remote
attacker could use this issue to cause NBD to crash, resulting in a denial
of service. (CVE-2015-0847)

OSVersionArchitecturePackageVersionFilename
Ubuntu15.04noarchnbd-server< 1:3.8-4ubuntu0.1UNKNOWN
Ubuntu15.04noarchnbd-client< 1:3.8-4ubuntu0.1UNKNOWN
Ubuntu15.04noarchnbd-client-dbgsym< 1:3.8-4ubuntu0.1UNKNOWN
Ubuntu15.04noarchnbd-client-udeb< 1:3.8-4ubuntu0.1UNKNOWN
Ubuntu15.04noarchnbd-client-udeb-dbgsym< 1:3.8-4ubuntu0.1UNKNOWN
Ubuntu15.04noarchnbd-server-dbgsym< 1:3.8-4ubuntu0.1UNKNOWN
Ubuntu14.10noarchnbd-server< 1:3.8-1ubuntu0.1UNKNOWN
Ubuntu14.10noarchnbd-client< 1:3.8-1ubuntu0.1UNKNOWN
Ubuntu14.10noarchnbd-client-dbgsym< 1:3.8-1ubuntu0.1UNKNOWN
Ubuntu14.10noarchnbd-client-udeb< 1:3.8-1ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	15.04	noarch	nbd-server	< 1:3.8-4ubuntu0.1	UNKNOWN
Ubuntu	15.04	noarch	nbd-client	< 1:3.8-4ubuntu0.1	UNKNOWN
Ubuntu	15.04	noarch	nbd-client-dbgsym	< 1:3.8-4ubuntu0.1	UNKNOWN
Ubuntu	15.04	noarch	nbd-client-udeb	< 1:3.8-4ubuntu0.1	UNKNOWN
Ubuntu	15.04	noarch	nbd-client-udeb-dbgsym	< 1:3.8-4ubuntu0.1	UNKNOWN
Ubuntu	15.04	noarch	nbd-server-dbgsym	< 1:3.8-4ubuntu0.1	UNKNOWN
Ubuntu	14.10	noarch	nbd-server	< 1:3.8-1ubuntu0.1	UNKNOWN
Ubuntu	14.10	noarch	nbd-client	< 1:3.8-1ubuntu0.1	UNKNOWN
Ubuntu	14.10	noarch	nbd-client-dbgsym	< 1:3.8-1ubuntu0.1	UNKNOWN
Ubuntu	14.10	noarch	nbd-client-udeb	< 1:3.8-1ubuntu0.1	UNKNOWN