CVE-2025-47712
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service
A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
nbdkit
- Vendor
- Unknown
- Product
- Unknown
- Platforms
- Unknown
- Default status
unaffected- Package
- nbdkit
- Package collection
- https://nbdkit.org/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1.21.16 | affected | semver | 1.38.6 | Unavailable | None listed |
| 1.40.0 | affected | semver | 1.40.6 | Unavailable | None listed |
| 1.42.0 | affected | semver | 1.42.3 | Unavailable | None listed |
Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
affected- Package
- nbdkit
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 7
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 7
- Platforms
- Unknown
- Default status
unknown- Package
- nbdkit
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 8
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 8
- Platforms
- Unknown
- Default status
unknown- Package
- virt:rhel/nbdkit
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 8 Advanced Virtualization
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 8 Advanced Virtualization
- Platforms
- Unknown
- Default status
unknown- Package
- virt:8.2/nbdkit
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 8 Advanced Virtualization
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 8 Advanced Virtualization
- Platforms
- Unknown
- Default status
unknown- Package
- virt:av/nbdkit
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- nbdkit
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.