CVE-2015-0847: nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service…

PriorityP338high7.8CVSS 2.0

AVNACLAuNCNINAC

EPSS

3.16%

86.5th percentile

nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
canonical	ubuntu_linux	—	—
debian	nbd	< nbd 1:3.10-1 (bookworm)	nbd 1:3.10-1 (bookworm)
wouter_verhelst	nbd	<= 3.10	—
wouter_verhelst	nbd	>= 0 < 1:3.10-1	1:3.10-1
wouter_verhelst	nbd	>= 0 < 1:3.10-1	1:3.10-1
wouter_verhelst	nbd	>= 0 < 1:3.10-1	1:3.10-1
wouter_verhelst	nbd	>= 0 < 1:3.10-1	1:3.10-1
wouter_verhelst	nbd	>= 0 < 1:3.7-1ubuntu0.1	1:3.7-1ubuntu0.1

CVSS provenance

nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C

osv7.8HIGH

vendor_debian7.8HIGH

vendor_ubuntu7.5HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.