Skip to content
OpenAdvisories
Low ELSA-2020-1167 1 CVE

Low: nbdkit security and bug fix update (Oracle Linux 7)

Published Apr 6, 2020 · Updated Apr 6, 2020

Ecosystem: Oracle Linux

Summary

[1.8.0-3]
- Fix for CVE-2019-14850 denial of service due to premature opening
of back-end connection
resolves: rhbz#1757261

[1.8.0-2]
- Explicitly disable nbdkit-ext2-plugin in configure
resolves: rhbz#1724242

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 nbdkit 0:1.8.0-3.el7
Oracle Linux · 7 nbdkit-basic-plugins 0:1.8.0-3.el7
Oracle Linux · 7 nbdkit-devel 0:1.8.0-3.el7
Oracle Linux · 7 nbdkit-example-plugins 0:1.8.0-3.el7
Oracle Linux · 7 nbdkit-plugin-python-common 0:1.8.0-3.el7
Oracle Linux · 7 nbdkit-plugin-python2 0:1.8.0-3.el7
Oracle Linux · 7 nbdkit-plugin-vddk 0:1.8.0-3.el7

Vulnerabilities 1

  • Unscored —
    CVE-2019-14850

    A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the …

    nbdkit nbdkit Debian Ubuntu