See how nbdkit compares to other vendors in security performance
Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service
A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.
The nbdkit server had an off-by-one error when processing block status results from plugins on behalf of an NBD client. If a client requests block status for the maximum 32-bit length, and the plugin reports a larger length as a single extent, then nbdkit hits an assertion failure. A compliant client could use this to cause a denial-of-service attack against the server to prevent it from serving other clients.