The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and cause it to perform a large amount of work in initializing backend plugins, by simply opening a connection to the service. This vulnerability could cause resource consumption and degradation of service in nbdkit, depending on the plugins configured on the server-side.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nbdkit-basic-pluginsUpgrade nbdkit-develUpgrade nbdkitUpgrade nbdkit-plugin-python-commonUpgrade nbdkit-plugin-vddkUpgrade nbdkit-plugin-python2Upgrade nbdkit-example-pluginsUpgrade nbdkit-debuginfo | Apr 1, 2020 | Mar 31, 2020 |
| Debian | — | Upgrade nbdkit | Jul 30, 2024 | Mar 18, 2021 |
| Oracle_linux | — | Upgrade nbdkit-example-pluginsUpgrade nbdkit-develUpgrade nbdkit-plugin-python2Upgrade nbdkitUpgrade nbdkit-plugin-python-commonUpgrade nbdkit-plugin-vddkUpgrade nbdkit-basic-plugins | Apr 9, 2020 | Sep 20, 2019 |
| Redhat_linux | — | Upgrade nbdkit-basic-pluginsUpgrade nbdkit-plugin-python-commonUpgrade nbdkitUpgrade nbdkit-develUpgrade nbdkit-plugin-vddkUpgrade nbdkit-example-pluginsNo solution existsUpgrade nbdkit-debuginfoUpgrade nbdkit-plugin-python2 | Apr 1, 2020 | Mar 31, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub