PatchTheCVEnbd vulnerabilities and fixes
Recent CVEs affecting nbd, with upgrade or downgrade steps. 3 tracked.
nbd has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2015-05-29. Highest priority: CVE-2015-0847 (score 54/100).
- CVE-2015-0847 HIGH 7.8 MITIGATE UPGRADE nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows r
- CVE-2013-7441 HIGH 7.8 DOWNGRADE The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers t
- CVE-2013-6410 HIGH 7.5 UPGRADE MITIGATE nbd-server in Network Block Device (nbd) before 3.5 does not properly check IP addresses, which might allow re
FAQ
How do I fix nbd vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nbd being exploited right now?
None of the tracked nbd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nbd CVE should I patch first?
CVE-2015-0847 currently ranks highest (54/100): nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows r.