Description
There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
nbdkit
Default version status: unaffected
1.11.10 to < 1.38.6affected1.40.0 to < 1.40.6affected1.42.0 to < 1.42.3affected
Red Hat Red Hat Enterprise Linux 10
Default version status: affected
Red Hat Red Hat Enterprise Linux 7
Default version status: unknown
Red Hat Red Hat Enterprise Linux 8
Default version status: unknown
Red Hat Red Hat Enterprise Linux 8 Advanced Virtualization
Default version status: unknown
Red Hat Red Hat Enterprise Linux 8 Advanced Virtualization
Default version status: unknown
Red Hat Red Hat Enterprise Linux 9
Default version status: affected