CVE-2011-1925: Null Pointer Dereference
First published: Tue May 31 2011(Updated: )
nbd-server.c in Network Block Device (nbd-server) 2.9.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by causing a negotiation failure, as demonstrated by specifying a name for a non-existent export.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/nbd | 1:3.19-3+deb10u1 1:3.21-1+deb11u1 1:3.24-1.1 1:3.25-1 | |
| wouter verhelst nbd | <=2.9.21 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/47884
- http://nbd.git.sourceforge.net/git/gitweb.cgi?p=nbd/nbd;a=commitdiff;h=ebbbe0b3ce5393fa42a259f5e03d549508586aaa
- http://www.openwall.com/lists/oss-security/2011/05/17/1
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627042.
- http://security.gentoo.org/glsa/glsa-201206-35.xml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67502
- https://security-tracker.debian.org/tracker/CVE-2011-1925
- http://nbd.git.sourceforge.net/git/gitweb.cgi?p=nbd/nbd%3Ba=commitdiff%3Bh=ebbbe0b3ce5393fa42a259f5e03d549508586aaa
Frequently Asked Questions
What is the severity of CVE-2011-1925?
CVE-2011-1925 is considered a moderate severity vulnerability that can lead to a denial of service.
How do I fix CVE-2011-1925?
To fix CVE-2011-1925, upgrade to a patched version of the nbd package, such as 1:3.19-3+deb10u1 or later.
What does CVE-2011-1925 affect?
CVE-2011-1925 affects the nbd-server component of the Network Block Device software version up to 2.9.21.
What is the impact of CVE-2011-1925?
The impact of CVE-2011-1925 is that it allows remote attackers to crash the nbd-server by causing a negotiation failure.
Who is the vendor for the software affected by CVE-2011-1925?
The vendor for the software affected by CVE-2011-1925 is Wouter Verhelst, the maintainer of the nbd software.
- collector/security-tracker-debian
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-api
- collector/nvd-index
- package-manager/debian
- vendor/wouter verhelst
- canonical/wouter verhelst nbd
- version/wouter verhelst nbd/2.9.21