CVE-2005-3534

Published: Dec 22, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.

Affected (3)

Products: Wouter Verhelst: Nbd

Wouter Verhelst

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Wouter Verhelst Nbd	Up to 2.7.5
Wouter Verhelst Nbd	Version 2.8.0
Wouter Verhelst Nbd	Version 2.8.2

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (32)

http://bugs.gentoo.org/show_bug.cgi?id=116314

Source: security@debian.org

http://secunia.com/advisories/18135

Source: security@debian.org

Vendor Advisory

http://secunia.com/advisories/18171

Source: security@debian.org

PatchVendor Advisory

http://secunia.com/advisories/18209

Source: security@debian.org

PatchVendor Advisory

http://secunia.com/advisories/18315

Source: security@debian.org

PatchVendor Advisory

http://secunia.com/advisories/18503

Source: security@debian.org

Vendor Advisory

http://secunia.com/advisories/43353

Source: security@debian.org

http://secunia.com/advisories/43610

Source: security@debian.org

http://sourceforge.net/mailarchive/forum.php?thread_id=9201144&forum_id=40388

Source: security@debian.org

http://sourceforge.net/project/shownotes.php?release_id=380202&group_id=13229

Source: security@debian.org

Patch

http://sourceforge.net/project/shownotes.php?release_id=380210&group_id=13229

Source: security@debian.org

Patch

http://www.debian.org/security/2005/dsa-924

Source: security@debian.org

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200512-14.xml

Source: security@debian.org

PatchVendor Advisory

http://www.osvdb.org/21848

Source: security@debian.org

Patch

http://www.securityfocus.com/bid/16029

Source: security@debian.org

Patch

https://usn.ubuntu.com/237-1/

Source: security@debian.org

http://bugs.gentoo.org/show_bug.cgi?id=116314

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18135

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/18171

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/18209

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/18315

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/18503

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/43353

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43610

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/mailarchive/forum.php?thread_id=9201144&forum_id=40388

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/project/shownotes.php?release_id=380202&group_id=13229

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://sourceforge.net/project/shownotes.php?release_id=380210&group_id=13229

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.debian.org/security/2005/dsa-924

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200512-14.xml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.osvdb.org/21848

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/16029

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://usn.ubuntu.com/237-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.