CVE-2013-7441
First published: Mon Mar 30 2015(Updated: )
The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a denial of service (root process termination) by (1) closing the connection during negotiation or (2) specifying a name for a non-existent export.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wouter Verhelst Nbd | =2.9.3 | |
| Wouter Verhelst Nbd | =2.9.4 | |
| Wouter Verhelst Nbd | =2.9.5 | |
| Wouter Verhelst Nbd | =2.9.6 | |
| Wouter Verhelst Nbd | =2.9.7 | |
| Wouter Verhelst Nbd | =2.9.8 | |
| Wouter Verhelst Nbd | =2.9.9 | |
| Wouter Verhelst Nbd | =2.9.22 | |
| Wouter Verhelst Nbd | =2.9.23 | |
| Wouter Verhelst Nbd | =2.9.24 | |
| Wouter Verhelst Nbd | =2.9.25 | |
| Wouter Verhelst Nbd | =3.0 | |
| Wouter Verhelst Nbd | =3.1 | |
| Wouter Verhelst Nbd | =3.1.1 | |
| Wouter Verhelst Nbd | =3.2 | |
| Wouter Verhelst Nbd | =3.3 | |
| debian/nbd | 1:3.19-3+deb10u1 1:3.21-1+deb11u1 1:3.24-1.1 1:3.25-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://security-tracker.debian.org/tracker/CVE-2011-1925
- http://sourceforge.net/p/nbd/mailman/message/30410146/
- https://github.com/yoe/nbd/commit/741495cb08503fd32a9d22648e63b64390c601f4
- https://github.com/tuomasjjrasanen/nbd/commit/6e7cc14f21f9e899412d307c331acb2cad85fc56
- https://security-tracker.debian.org/tracker/CVE-2013-7441
- http://www.openwall.com/lists/oss-security/2015/05/21/5
- https://security-tracker.debian.org/tracker/CVE-2015-0847
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781547
- http://lists.opensuse.org/opensuse-updates/2015-06/msg00003.html
- http://www.debian.org/security/2015/dsa-3271
- http://www.openwall.com/lists/oss-security/2015/05/19/6
- http://www.securityfocus.com/bid/74808
- http://www.ubuntu.com/usn/USN-2676-1
- https://www.openwall.com/lists/oss-security/2015/05/19/6
- collector/debian-bugs
- alias/CVE-2013-7441
- collector/nvd-index
- collector/security-tracker-debian
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/tags
- agent/type
- agent/event
- agent/description
- vendor/wouter verhelst
- canonical/wouter verhelst nbd
- version/wouter verhelst nbd/2.9.3
- version/wouter verhelst nbd/2.9.4
- version/wouter verhelst nbd/2.9.5
- version/wouter verhelst nbd/2.9.6
- version/wouter verhelst nbd/2.9.7
- version/wouter verhelst nbd/2.9.8
- version/wouter verhelst nbd/2.9.9
- version/wouter verhelst nbd/2.9.22
- version/wouter verhelst nbd/2.9.23
- version/wouter verhelst nbd/2.9.24
- version/wouter verhelst nbd/2.9.25
- version/wouter verhelst nbd/3.0
- version/wouter verhelst nbd/3.1
- version/wouter verhelst nbd/3.1.1
- version/wouter verhelst nbd/3.2
- version/wouter verhelst nbd/3.3
- package-manager/debian