CVE-2011-0530

2011-02-2200:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.262 Low

EPSS

Percentile

96.7%

JSON

Buffer overflow in the mainloop function in nbd-server.c in the server in
Network Block Device (nbd) before 2.9.20 might allow remote attackers to
execute arbitrary code via a long request. NOTE: this issue exists because
of a CVE-2005-3534 regression.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchnbd< 1:2.9.14-2ubuntu1.10.04.1UNKNOWN
ubuntu10.10noarchnbd< 1:2.9.14-2ubuntu1.10.10.1UNKNOWN
ubuntu11.04noarchnbd< 1:2.9.16-7.1ubuntu2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	nbd	< 1:2.9.14-2ubuntu1.10.04.1	UNKNOWN
ubuntu	10.10	noarch	nbd	< 1:2.9.14-2ubuntu1.10.10.1	UNKNOWN
ubuntu	11.04	noarch	nbd	< 1:2.9.16-7.1ubuntu2	UNKNOWN