CVE-2011-1925: Null Pointer Dereference
nbd-server.c in Network Block Device (nbd-server) 2.9.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by causing a negotiation failure, as demonstrated by specifying a name for a non-existent export.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1925?
CVE-2011-1925 is considered a moderate severity vulnerability that can lead to a denial of service.
How do I fix CVE-2011-1925?
To fix CVE-2011-1925, upgrade to a patched version of the nbd package, such as 1:3.19-3+deb10u1 or later.
What does CVE-2011-1925 affect?
CVE-2011-1925 affects the nbd-server component of the Network Block Device software version up to 2.9.21.
What is the impact of CVE-2011-1925?
The impact of CVE-2011-1925 is that it allows remote attackers to crash the nbd-server by causing a negotiation failure.
Who is the vendor for the software affected by CVE-2011-1925?
The vendor for the software affected by CVE-2011-1925 is Wouter Verhelst, the maintainer of the nbd software.