https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:29:13 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-03008 bdu:2026-03008 https://cve.radiocsirt.org/vuln/bdu:2026-03008 https://cve.radiocsirt.org/vuln/euvd-2026-331268 EUVD-2026-331268 https://cve.radiocsirt.org/vuln/euvd-2026-331268 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47711 <p>There&#39;s a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.</p> <p>There&#39;s a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-47711 https://cve.radiocsirt.org/vuln/ghsa-c8xj-fr2w-pjfc <p>There&#39;s a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.</p> <p>There&#39;s a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.</p> https://cve.radiocsirt.org/vuln/ghsa-c8xj-fr2w-pjfc https://cve.radiocsirt.org/vuln/msrc_cve-2025-47711 msrc_CVE-2025-47711 https://cve.radiocsirt.org/vuln/msrc_cve-2025-47711 https://cve.radiocsirt.org/vuln/oesa-2025-1777 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: nbdkit</p> <p>NBD (Network Block Device) is a protocol for accessing Block Devices (hard disks and disk-like things) over a Network. nbdkit is a toolkit for creating NBD servers. The key features are: * Multithreaded NBD server written in C with good performance. * Minimal dependencies for the basic server. * Liberal license (BSD) allows nbdkit to be linked to proprietary libraries or included in proprietary code. * Well-documented, simple plugin API with a stable ABI guarantee. Lets you export “unconventional” block devices easily. * You can write plugins in C, Lua, Perl, Python, OCaml, Ruby, Rust, shell script or Tcl. * Filters can be stacked in front of plugins to transform the output. Security Fix(es):</p> <p>There&amp;apos;s a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.(CVE-2025-47711)</p> <p>A flaw exists in the nbdkit &amp;quot;blocksize&amp;quot; filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.(CVE-2025-47712)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: nbdkit</p> <p>NBD (Network Block Device) is a protocol for accessing Block Devices (hard disks and disk-like things) over a Network. nbdkit is a toolkit for creating NBD servers. The key features are: * Multithreaded NBD server written in C with good performance. * Minimal dependencies for the basic server. * Liberal license (BSD) allows nbdkit to be linked to proprietary libraries or included in proprietary code. * Well-documented, simple plugin API with a stable ABI guarantee. Lets you export “unconventional” block devices easily. * You can write plugins in C, Lua, Perl, Python, OCaml, Ruby, Rust, shell script or Tcl. * Filters can be stacked in front of plugins to transform the output. Security Fix(es):</p> <p>There&amp;apos;s a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.(CVE-2025-47711)</p> <p>A flaw exists in the nbdkit &amp;quot;blocksize&amp;quot; filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.(CVE-2025-47712)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1777 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15088-1 <p>nbdkit-1.42.3-1.1 on GA media</p> <p>nbdkit-1.42.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15088-1 https://cve.radiocsirt.org/vuln/suse-su-2025:01889-1 <p>Security update for nbdkit</p> <p>Security update for nbdkit</p> https://cve.radiocsirt.org/vuln/suse-su-2025:01889-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-47711 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: nbdkit, Ubuntu:20.04:LTS: nbdkit, Ubuntu:22.04:LTS: nbdkit, Ubuntu:24.04:LTS: nbdkit, Ubuntu:25.10: nbdkit, Ubuntu:26.04:LTS: nbdkit</p> <p>There&#39;s a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: nbdkit, Ubuntu:20.04:LTS: nbdkit, Ubuntu:22.04:LTS: nbdkit, Ubuntu:24.04:LTS: nbdkit, Ubuntu:25.10: nbdkit, Ubuntu:26.04:LTS: nbdkit</p> <p>There&#39;s a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-47711