REDHAT-BUG-2365687: Medium severity nbdkit nbdkit vulnerability
The nbdkit server had an off-by-one error when processing block status results from plugins on behalf of an NBD client. If a client requests block status for the maximum 32-bit length, and the plugin reports a larger length as a single extent, then nbdkit hits an assertion failure. A compliant client could use this to cause a denial-of-service attack against the server to prevent it from serving other clients.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2365687?
The severity of REDHAT-BUG-2365687 is categorized as a critical issue due to the potential for assertion failures affecting server stability.
How do I fix REDHAT-BUG-2365687?
To fix REDHAT-BUG-2365687, ensure that you apply the latest patch released by Red Hat that addresses this assertion failure.
What versions are affected by REDHAT-BUG-2365687?
REDHAT-BUG-2365687 affects various versions of the nbdkit server; check the specific version release notes for detailed information.
What is the impact of REDHAT-BUG-2365687?
The impact of REDHAT-BUG-2365687 includes potential server crashes due to assertion failures when handling block status requests.
Are there any workarounds for REDHAT-BUG-2365687?
As of now, there are no official workarounds for REDHAT-BUG-2365687; applying the patch is the recommended approach.