PT-2015-3589 · Nbd+2 · Nbd-Server+2

Tuomas Räsänen · Publicado 2015-05-23 · Atualizado 2024-11-15 · CVE-2013-7441

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions nbd-server versions 2.9.22 through 3.3

Description The issue in nbd-server allows remote attackers to cause a denial of service by either closing the connection during negotiation or specifying a name for a non-existent export, which can lead to the termination of the root process.

Recommendations For versions 2.9.22 through 3.3, consider implementing measures to handle connection closures and invalid export names to prevent denial of service attacks. As a temporary workaround, restrict access to the nbd-server to minimize the risk of exploitation.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2020-3164

ALT-PU-2020-3187

ALT-PU-2024-15569

CVE-2013-7441

DSA-3271-1

USN-2676-1

Produtos afetados

Alt Linux

Ubuntu

Nbd-Server

Referências · 21

• https://github.com/yoe/nbd/commit/741495cb08503fd32a9d22648e63b64390c601f4 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-7441 · Aviso do Fabricante
• http://debian.org/security/2015/dsa-3271 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-3271-1 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2015/05/21/5 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-7441 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-2676-1 · Aviso do Fabricante
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781547 · Nota
• https://osv.dev/vulnerability/USN-2676-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2013-7441 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-7441 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2013-7441 · Nota de Segurança
• http://securityfocus.com/bid/74808 · Nota
• http://sourceforge.net/p/nbd/mailman/message/30410146 · Nota
• https://ubuntu.com/security/CVE-2013-7441 · Aviso do Fabricante