Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-0530

Опубликовано: 22 фев. 2011
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:wouter_verhelst:nbd:*:*:*:*:*:*:*:*
Версия до 2.9.19 (включая)
cpe:2.3:a:wouter_verhelst:nbd:2.9.0:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.1:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.2:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.3:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.4:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.5:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.6:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.7:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.8:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.9:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.10:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.11:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.12:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.13:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.14:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.15:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.16:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.17:*:*:*:*:*:*:*
cpe:2.3:a:wouter_verhelst:nbd:2.9.18:*:*:*:*:*:*:*

EPSS

Процентиль: 93%
0.09996
Низкий

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
почти 15 лет назад

Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.

debian
почти 15 лет назад

Buffer overflow in the mainloop function in nbd-server.c in the server ...

github
больше 3 лет назад

Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.

EPSS

Процентиль: 93%
0.09996
Низкий

7.5 High

CVSS2

Дефекты

CWE-119