| Package | Affected versions | Patched versions |
|---|---|---|
| network block device | < 3.24 | 3.24 |
In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBD_OPT_INFO or NBD_OPT_GO message with an large value as the length of the name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free