Name
nbdkit
Version
1.33.11
Type
library
Description
nbdkit is a toolkit for creating NBD servers.
Licenses
BSD-3-Clause
PURL
-
CPE
cpe:2.3:*:*:nbdkit:1.33.11:*:*:*:*:*:*:*
Other Versions#
Patches#
#
Title
Author
Resolve
1
blocksize: Fix 32-bit overflow in .extents
Gyorgy Sarvari <skandigraun@gmail.com>
CVE-2025-47712
2
server: Fix off-by-one for maximum block_status length
Gyorgy Sarvari <skandigraun@gmail.com>
CVE-2025-47711
3
plugins: Avoid absolute buildpaths in binaries
Khem Raj <raj.khem@gmail.com>
Vulnerabilities#
Name
Analysis
Description
Patched
A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.
Patched
There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.