CVE-2015-0847

Published: May 29, 2015Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.

Affected (5)

Products: Canonical: Ubuntu Linux · Wouter Verhelst: Nbd

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10
Canonical Ubuntu Linux	Version 15.04

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Wouter Verhelst Nbd	Up to 3.10

Related CWEs

CWE-17

References (12)

http://lists.opensuse.org/opensuse-updates/2015-06/msg00003.html

Source: security@debian.org

http://sourceforge.net/p/nbd/mailman/message/34091218/

Source: security@debian.org

http://sourceforge.net/projects/nbd/files/nbd/3.11/

Source: security@debian.org

Patch

http://www.debian.org/security/2015/dsa-3271

Source: security@debian.org

http://www.openwall.com/lists/oss-security/2015/05/07/9

Source: security@debian.org

http://www.ubuntu.com/usn/USN-2676-1

Source: security@debian.org

http://lists.opensuse.org/opensuse-updates/2015-06/msg00003.html