In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Memory Corruption
Buffer Overflow
Network Block Device
Debian Linux
Fedora
NVD
CVSS 3.1
9.8
EPSS
3.5%
In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Integer Overflow
Buffer Overflow
Network Block Device
Debian Linux
Fedora
NVD
CVSS 3.1
9.8
EPSS
2.7%