https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-0847.htmlhttps://patchthecve.com/cve/CVE-2015-0847.htmlWed, 17 Jun 2026 00:21:01 +0000HIGH 7.8: nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.https://patchthecve.com/cve/CVE-2013-7441.htmlhttps://patchthecve.com/cve/CVE-2013-7441.htmlWed, 17 Jun 2026 00:01:57 +0000HIGH 7.8: The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a denial of service (root process termination) by (1) closing the connection during negotiation or (2) specifying a name for a non-existent export.https://patchthecve.com/cve/CVE-2013-6410.htmlhttps://patchthecve.com/cve/CVE-2013-6410.htmlWed, 17 Jun 2026 00:00:26 +0000HIGH 7.5: nbd-server in Network Block Device (nbd) before 3.5 does not properly check IP addresses, which might allow remote attackers to bypass intended access restrictions via an IP address that has a partial match in the authfile configuration file.https://patchthecve.com/cve/CVE-2011-1925.htmlhttps://patchthecve.com/cve/CVE-2011-1925.htmlTue, 16 Jun 2026 23:30:24 +0000MEDIUM 5.0: nbd-server.c in Network Block Device (nbd-server) 2.9.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by causing a negotiation failure, as demonstrated by specifying a name for a non-existent export.https://patchthecve.com/cve/CVE-2011-0530.htmlhttps://patchthecve.com/cve/CVE-2011-0530.htmlTue, 16 Jun 2026 23:27:34 +0000HIGH 7.5: Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.