vulnerability

SUSE: CVE-2025-47711: SUSE Linux Security Advisory

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:N/A:P)
Published
Jun 11, 2025
Added
Dec 5, 2025
Modified
Dec 5, 2025

Description

There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.

Solutions

suse-upgrade-nbdkitsuse-upgrade-nbdkit-bash-completionsuse-upgrade-nbdkit-basic-filterssuse-upgrade-nbdkit-basic-pluginssuse-upgrade-nbdkit-curl-pluginsuse-upgrade-nbdkit-develsuse-upgrade-nbdkit-example-pluginssuse-upgrade-nbdkit-gzip-filtersuse-upgrade-nbdkit-linuxdisk-pluginsuse-upgrade-nbdkit-nbd-pluginsuse-upgrade-nbdkit-python-pluginsuse-upgrade-nbdkit-serversuse-upgrade-nbdkit-ssh-pluginsuse-upgrade-nbdkit-tar-filtersuse-upgrade-nbdkit-tmpdisk-pluginsuse-upgrade-nbdkit-vddk-pluginsuse-upgrade-nbdkit-xz-filter
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.