Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-47712

Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nbdkit

Default version status: unaffected

  • 1.21.16 to < 1.38.6affected
  • 1.40.0 to < 1.40.6affected
  • 1.42.0 to < 1.42.3affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat Enterprise Linux 8

Default version status: unknown

Red Hat Red Hat Enterprise Linux 8 Advanced Virtualization

Default version status: unknown

Red Hat Red Hat Enterprise Linux 8 Advanced Virtualization

Default version status: unknown

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

References