CVE-2011-1925: Null Pointer Dereference
First published: Tue May 31 2011(Updated: )
nbd-server.c in Network Block Device (nbd-server) 2.9.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by causing a negotiation failure, as demonstrated by specifying a name for a non-existent export.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wouter Verhelst Nbd | <=2.9.21 | |
| debian/nbd | 1:3.19-3+deb10u1 1:3.21-1+deb11u1 1:3.24-1.1 1:3.25-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/47884
- http://nbd.git.sourceforge.net/git/gitweb.cgi?p=nbd/nbd;a=commitdiff;h=ebbbe0b3ce5393fa42a259f5e03d549508586aaa
- http://www.openwall.com/lists/oss-security/2011/05/17/1
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627042.
- http://security.gentoo.org/glsa/glsa-201206-35.xml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67502
- https://security-tracker.debian.org/tracker/CVE-2011-1925
- http://nbd.git.sourceforge.net/git/gitweb.cgi?p=nbd/nbd%3Ba=commitdiff%3Bh=ebbbe0b3ce5393fa42a259f5e03d549508586aaa
- collector/nvd-historical
- collector/nvd-index
- collector/security-tracker-debian
- collector/nvd-api
- agent/author
- agent/severity
- agent/references
- agent/type
- agent/event
- agent/weakness
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/wouter verhelst
- canonical/wouter verhelst nbd
- version/wouter verhelst nbd/2.9.21
- package-manager/debian