CVE - CVE-2013-7441

CVE-ID
CVE-2013-7441	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a denial of service (root process termination) by (1) closing the connection during negotiation or (2) specifying a name for a non-existent export.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:74808 URL:http://www.securityfocus.com/bid/74808 CONFIRM:https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781547 CONFIRM:https://github.com/yoe/nbd/commit/741495cb08503fd32a9d22648e63b64390c601f4 DEBIAN:DSA-3271 URL:http://www.debian.org/security/2015/dsa-3271 MLIST:[Nbd] 20130128 NBD server terminates on SIGPIPE during negotiation URL:http://sourceforge.net/p/nbd/mailman/message/30410146/ MLIST:[oss-security] 20150519 CVE Request: nbd denial of service URL:http://www.openwall.com/lists/oss-security/2015/05/19/6 MLIST:[oss-security] 20150521 Re: CVE Request: nbd denial of service URL:http://www.openwall.com/lists/oss-security/2015/05/21/5 SUSE:openSUSE-SU-2015:0994 URL:http://lists.opensuse.org/opensuse-updates/2015-06/msg00003.html UBUNTU:USN-2676-1 URL:http://www.ubuntu.com/usn/USN-2676-1
Assigning CNA
MITRE Corporation
Date Record Created
20150521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20150521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)