The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nbdkit | May 15, 2025 | May 15, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 9, 2025 |
| Suse | — | Upgrade nbdkit-nbd-pluginUpgrade nbdkit-gzip-filterUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-python-pluginUpgrade nbdkit-develUpgrade nbdkit-basic-filtersUpgrade nbdkit-xz-filterUpgrade nbdkit-curl-pluginUpgrade nbdkit-example-pluginsUpgrade nbdkit-bash-completionUpgrade nbdkit-tar-filterUpgrade nbdkitUpgrade nbdkit-basic-pluginsUpgrade nbdkit-tmpdisk-pluginUpgrade nbdkit-vddk-pluginUpgrade nbdkit-serverUpgrade nbdkit-ssh-plugin | Dec 5, 2025 | Jun 11, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub