Approved changes feed: RSS · Atom

cpe:2.3:a:wouter_verhelst:nbd:2.9.7:*:*:*:*:*:*:*

part: a version: 2.9.7 update: *

VendorWouter Verhelst (68327293-2cfc-5e79-94ff-2783a3a0c408)
ProductNbd (b5ff54f8-f52e-521c-989b-552f9c2e4d9d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/networkblockdevice/nbd purl2cpe 2026-06-01 10:15:43.964761
pkg:rpm/fedora/nbd purl2cpe 2026-06-01 10:15:43.964762
pkg:rpm/opensuse/nbd purl2cpe 2026-06-01 10:15:43.964763
pkg:sourceforge/nbd purl2cpe 2026-06-01 10:15:43.964765

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7441 vulnerable 2026-06-08 05:05:10.329408 Details available
The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a denial of service (root process termination) by (1) closing the connection during negotiation or (2) specifying a name for a non-existent export.
Published: 2015-05-29T15:00:00.000Z
Updated: 2024-08-06T18:09:16.094Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6410 vulnerable 2026-06-08 05:04:56.543624 Details available
nbd-server in Network Block Device (nbd) before 3.5 does not properly check IP addresses, which might allow remote attackers to bypass intended access restrictions via an IP address that has a partial match in the authfile configuration file.
Published: 2013-12-07T20:00:00.000Z
Updated: 2024-08-06T17:39:01.232Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0530 vulnerable 2026-06-08 04:56:37.697278 Details available
Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.
Published: 2011-02-22T18:00:00.000Z
Updated: 2024-08-06T21:58:25.565Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.