Sept. 28, 2023, 2:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-bit unsigned value). This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the return value of the nbd_get_size() function correctly.

64-bit application block clients crash cve flaw found function issue return server size spec states value

Sr. Product Manager

@ MixMode | Remote, US

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

Test Systems Design & Cybersecurity Engineer

@ Boeing | USA - El Segundo, CA

Cybersecurity Support Engineer (FortiClient) - Malaysia

@ Fortinet | Wilayah Persekutuan Kuala Lumpur, Malaysia