CVE-2015-0847

High

Published: 29/05/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The nbd-server.c file in Network Block Device (nbd-server) before version 3.11 does not properly handle signals, allowing remote attackers to cause a denial of service (deadlock) via unspecified vectors.

Risk Assessment

Attackers can exploit this vulnerability to cause service outages, leading to downtime and loss of system availability.

Recommendation

It is recommended to upgrade to nbd-server version 3.11 or later to mitigate this vulnerability.

Other vulnerabilities in Network Block Device (nbd-server)

CVE-2013-7441High
The modern style negotiation in Network Block Device (nbd-server) versions 2.9.22 through 3.3 allows remote attackers to cause a denial of service by terminating the root process. This can be achieved by closing the connection during negotiation or specifying a name for a non-existent export.

Original NVD description (English source)

nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.