Summary
It was discovered that NBD incorrectly handled name length fields. A remote
attacker could use this issue to cause NBD to crash, resulting in a denial
of service, or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | nbd | 1:3.16.2-1ubuntu0.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | nbd | 1:3.20-1ubuntu0.1 |
Vulnerabilities 2
-
Unscored —
In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of …
-
Unscored —
In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in th…