CVE Feed

    Dashboard / CVE / CVE-2011-0530

    CVE-2011-0530

    Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.

    Published:Feb 22, 2011
    Last Modified:Apr 11, 2025
    EPS:Feb 22, 2011
    EPSS Score:0.09996
    CVSS Score:7.5

    Affected Products

    Vendor
    Wouter Verhelst
    Product
    Nbd

    Exploits

    No exploit reference

    References

    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611187
    http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054071.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054083.html
    http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
    http://openwall.com/lists/oss-security/2011/01/28/3
    http://openwall.com/lists/oss-security/2011/01/31/7
    http://secunia.com/advisories/43353
    http://secunia.com/advisories/43610
    http://security.gentoo.org/glsa/glsa-201206-35.xml
    http://www.debian.org/security/2011/dsa-2183
    http://www.securityfocus.com/bid/46572
    http://www.vupen.com/english/advisories/2011/0403
    http://www.vupen.com/english/advisories/2011/0582
    https://bugzilla.redhat.com/show_bug.cgi?id=673562
    https://exchange.xforce.ibmcloud.com/vulnerabilities/65720
    https://github.com/yoe/nbd/commit/3ef52043861ab16352d49af89e048ba6339d6df8
    https://hermes.opensuse.org/messages/8086846
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611187
    http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054071.html
    http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054083.html
    http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
    http://openwall.com/lists/oss-security/2011/01/28/3
    http://openwall.com/lists/oss-security/2011/01/31/7
    http://secunia.com/advisories/43353
    http://secunia.com/advisories/43610
    http://security.gentoo.org/glsa/glsa-201206-35.xml
    http://www.debian.org/security/2011/dsa-2183
    http://www.securityfocus.com/bid/46572
    http://www.vupen.com/english/advisories/2011/0403
    http://www.vupen.com/english/advisories/2011/0582
    https://bugzilla.redhat.com/show_bug.cgi?id=673562
    https://exchange.xforce.ibmcloud.com/vulnerabilities/65720
    https://github.com/yoe/nbd/commit/3ef52043861ab16352d49af89e048ba6339d6df8
    https://hermes.opensuse.org/messages/8086846

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High