CVE-2025-47711
Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service
There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.
Reserved 2025-05-07 | Published 2025-06-09 | Updated 2025-06-09 | Assigner redhat| 2025-05-12: | Reported to Red Hat. |
| 2025-04-23: | Made public. |
access.redhat.com/security/cve/CVE-2025-47711
bugzilla.redhat.com/show_bug.cgi?id=2365687 (RHBZ#2365687)
Support options
