CVE-2011-0530

Published: Feb 22, 2011Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.

Affected (20)

Products: Wouter Verhelst: Nbd

Wouter Verhelst

1 product

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Wouter Verhelst Nbd	Up to 2.9.19
Wouter Verhelst Nbd	Version 2.9.0
Wouter Verhelst Nbd	Version 2.9.10
Wouter Verhelst Nbd	Version 2.9.11
Wouter Verhelst Nbd	Version 2.9.12
Wouter Verhelst Nbd	Version 2.9.13
Wouter Verhelst Nbd	Version 2.9.14
Wouter Verhelst Nbd	Version 2.9.15
Wouter Verhelst Nbd	Version 2.9.16
Wouter Verhelst Nbd	Version 2.9.17
Wouter Verhelst Nbd	Version 2.9.18
Wouter Verhelst Nbd	Version 2.9.1
Wouter Verhelst Nbd	Version 2.9.2
Wouter Verhelst Nbd	Version 2.9.3
Wouter Verhelst Nbd	Version 2.9.4
Wouter Verhelst Nbd	Version 2.9.5
Wouter Verhelst Nbd	Version 2.9.6
Wouter Verhelst Nbd	Version 2.9.7
Wouter Verhelst Nbd	Version 2.9.8
Wouter Verhelst Nbd	Version 2.9.9

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (34)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611187

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054071.html

Source: secalert@redhat.com

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054083.html

Source: secalert@redhat.com

Patch

http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/01/28/3

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2011/01/31/7

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/43353

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43610

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201206-35.xml

Source: secalert@redhat.com

http://www.debian.org/security/2011/dsa-2183

Source: secalert@redhat.com

http://www.securityfocus.com/bid/46572

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0403

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0582

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=673562

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/65720

Source: secalert@redhat.com

https://github.com/yoe/nbd/commit/3ef52043861ab16352d49af89e048ba6339d6df8

Source: secalert@redhat.com

Patch

https://hermes.opensuse.org/messages/8086846

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611187

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054071.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054083.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/01/28/3

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2011/01/31/7

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/advisories/43353

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/43610

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201206-35.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2011/dsa-2183

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/46572

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0403

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0582

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=673562

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/65720

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/yoe/nbd/commit/3ef52043861ab16352d49af89e048ba6339d6df8

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://hermes.opensuse.org/messages/8086846

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.