← Database

CVE-2022-26496

CRITICAL CVSS: 9.8 Published: 2022-03-06 Modified: 2026-06-17

Description

In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in the parsing of the name field by sending a crafted NBD_OPT_INFO or NBD_OPT_GO message with an large value as the length of the name.

Affected Platforms

Debian Debian LinuxNetwork Block Device Project Network Block DeviceFedoraproject Fedora

Weakness Type

CWE-787

References