Logo
componentnbdkit
Name
nbdkit
Version
1.30.2
Type
library
Description
nbdkit is a toolkit for creating NBD servers.
Licenses
BSD-3-Clause
PURL
-
CPE
cpe:2.3:*:*:nbdkit:1.30.2:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
master
1.47.9
scarthgap
1.33.11

Patches#


#
Title
Author
Resolve
1
blocksize: Fix 32-bit overflow in .extents [CVE-2025-47712]
Eric Blake <eblake@redhat.com>
CVE-2025-47712
2
server: Fix off-by-one for maximum block_status length
Eric Blake <eblake@redhat.com>
CVE-2025-47711

Vulnerabilities#


Name
Analysis
Description
Patched
A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.
Patched
There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.