
We found results for “”
CVE-2025-47712
Good to know:

Date: June 9, 2025
A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.
Severity Score
Related Resources (5)
Severity Score
Weakness Type (CWE)
Integer Overflow or Wraparound
CWE-190Top Fix

Upgrade Version
Upgrade to version https://gitlab.com/nbdkit/nbdkit.git - v1.42.3;https://gitlab.com/nbdkit/nbdkit.git - v1.43.7
CVSS v3.1
Base Score: |
|
---|---|
Attack Vector (AV): | NETWORK |
Attack Complexity (AC): | LOW |
Privileges Required (PR): | LOW |
User Interaction (UI): | NONE |
Scope (S): | UNCHANGED |
Confidentiality (C): | NONE |
Integrity (I): | NONE |
Availability (A): | LOW |