Approved changes feed: RSS · Atom

cpe:2.3:a:network_block_device_project:network_block_device:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetwork Block Device Project (9466827c-c549-56cd-9be6-5ca1f760a05c)
ProductNetwork Block Device (180d7080-c44d-5dfd-8fd8-697b7c5beb03)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nbd purl2cpe 2026-06-01 10:12:51.552580
pkg:deb/ubuntu/nbd purl2cpe 2026-06-01 10:12:51.552583
pkg:github/networkblockdevice/nbd purl2cpe 2026-06-01 10:12:51.552585
pkg:rpm/fedora/nbd purl2cpe 2026-06-01 10:12:51.552588
pkg:rpm/opensuse/nbd purl2cpe 2026-06-01 10:12:51.552591

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-26496 vulnerable 2026-06-08 05:41:52.274257 Details available
In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBD_OPT_INFO or NBD_OPT_GO message with an large value as the length of the name.
Published: 2022-03-06T00:00:00.000Z
Updated: 2024-08-03T05:03:32.965Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26495 vulnerable 2026-06-08 05:41:52.273613 Details available
In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of 0xffffffff in the name length field will cause a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue exists for the NBD_OPT_INFO, NBD_OPT_GO, and NBD_OPT_EXPORT_NAME messages.
Published: 2022-03-06T00:00:00.000Z
Updated: 2024-08-03T05:03:32.903Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.