CVE-2011-0530

nbd < 2.9.20 - Remote Code Execution via Long Request

Title source: llm
STIX 2.1

Description

Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.

References (17)

Core 17
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201206-35.xml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43610
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0403
Patch mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/01/28/3
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/65720
Patch mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/01/31/7
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0582
Issue Tracking x_refsource_confirm
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611187
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/46572
Various Sources vendor-advisory x_refsource_suse
https://hermes.opensuse.org/messages/8086846
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2183
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43353

Scores

EPSS 0.0528
EPSS Percentile 91.6%

Details

CWE
CWE-119
Status published
Products (20)
wouter_verhelst/nbd 2.9.0
wouter_verhelst/nbd 2.9.1
wouter_verhelst/nbd 2.9.2
wouter_verhelst/nbd 2.9.3
wouter_verhelst/nbd 2.9.4
wouter_verhelst/nbd 2.9.5
wouter_verhelst/nbd 2.9.6
wouter_verhelst/nbd 2.9.7
wouter_verhelst/nbd 2.9.8
wouter_verhelst/nbd 2.9.9
... and 10 more
Published Feb 22, 2011
Tracked Since Feb 18, 2026