CVE-2013-7441

High

Published: 29/05/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The modern style negotiation in Network Block Device (nbd-server) versions 2.9.22 through 3.3 allows remote attackers to cause a denial of service by terminating the root process. This can be achieved by closing the connection during negotiation or specifying a name for a non-existent export.

Risk Assessment

Attackers can disrupt service availability, potentially impacting the organization's operations and resources. This could lead to significant operational disruptions.

Recommendation

It is recommended to update nbd-server to the latest version to mitigate this vulnerability. Additionally, monitoring connections and implementing security measures against unauthorized access is advisable.

Other vulnerabilities in Network Block Device (nbd-server)

CVE-2015-0847High
The nbd-server.c file in Network Block Device (nbd-server) before version 3.11 does not properly handle signals, allowing remote attackers to cause a denial of service (deadlock) via unspecified vectors.

Original NVD description (English source)

The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a denial of service (root process termination) by (1) closing the connection during negotiation or (2) specifying a name for a non-existent export.