CVE-2022-26496

Name
CVE-2022-26496
Description
In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBD_OPT_INFO or NBD_OPT_GO message with an large value as the length of the name.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Product https://sourceforge.net/projects/nbd/files/nbd/
Exploit https://lists.debian.org/nbd/2022/01/msg00037.html
Mailing List https://lists.debian.org/nbd/2022/01/msg00036.html
DEBIAN https://www.debian.org/security/2022/dsa-5100
FEDORA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZHR73XMAJTCFGKUZRXVTZKCK2X3IFNA/
FEDORA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU5JFD4PEJED72TZLZ5R2Q2SFXICU5I5/
FEDORA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G2UPX62BIWOOHSACGUDB7E3O4URNN37F/
MISC http://packetstormsecurity.com/files/172148/Shannon-Baseband-fmtp-SDP-Attribute-Memory-Corruption.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZHR73XMAJTCFGKUZRXVTZKCK2X3IFNA/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU5JFD4PEJED72TZLZ5R2Q2SFXICU5I5/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G2UPX62BIWOOHSACGUDB7E3O4URNN37F/
cve@mitre.org https://security.gentoo.org/glsa/202402-10

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:network_block_device_project:network_block_device:*:*:*:*:*:*:*:* network_block_device >= None < 3.24

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
nbd edge-community 3.24-r0 Carlo Landmeter <clandmeter@alpinelinux.org> fixed
nbd 3.22-community 3.24-r0 None fixed
nbd 3.21-community 3.24-r0 None fixed
nbd 3.20-community 3.24-r0 None fixed
nbd 3.19-community 3.24-r0 None fixed
nbd 3.18-community 3.24-r0 None fixed
nbd 3.17-community 3.24-r0 Carlo Landmeter <clandmeter@alpinelinux.org> fixed