Network Block Device vulnerabilities

2 known vulnerabilities in Network Block Device from Network Block Device Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Network Block Device: Out-of-bounds Write

  CVE-2022-26496Mar 6, 2022Network Block Device ProjectEPSS 3.59%

  In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBD_OPT_INFO or NBD_OPT_GO message with an large value as the length of the name.

• 9.8 Critical severity

  Network Block Device: Integer Overflow or Wraparound

  CVE-2022-26495Mar 6, 2022Network Block Device ProjectEPSS 2.86%

  In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer.