CVE-2015-0847
nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals,...
CVE-2015-0847 is a high vulnerability (CVSS 7.8) in Wouter Verhelst Nbd, published May 17, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.20%, the 88th percentile. Fixed in nbd 1:3.10-1.
nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.
- Record
CVE-2015-0847- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-17
- Updated
- 2026-11-02
CVE List No score
nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.
- Record
CVE-2015-0847- Updated
- 2026-11-02
EUVDEUVD-2015-0858 No score
nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.
- Record
EUVD-2015-0858- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m79m-w7q9-8mx9 No score
nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals,...
nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.
- Record
GHSA-m79m-w7q9-8mx9- Updated
- 2026-11-02
OSV No score
nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.
- Record
CVE-2015-0847- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-0847 No score
nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.
- Record
DEBIAN-CVE-2015-0847- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10573-1 No score
nbd-3.13-3.5 on GA media
These are all security issues fixed in the nbd-3.13-3.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10573-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-0847 No score
nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.
- Record
UBUNTU-CVE-2015-0847- Updated
- 2026-11-02
OSVUSN-2676-1 No score
nbd vulnerabilities
It was discovered that NBD incorrectly handled IP address matching. A remote attacker could use this issue with an IP address that has a partial match and bypass access restrictions. This issue only affected Ubuntu 12.04 LTS. (CVE-2013-6410)
Tuomas Räsänen discovered that NBD incorrectly handled wrong export names and closed connections during negotiation. A remote attacker could use this issue to cause NBD to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. (CVE-2013-7441)
Tuomas Räsänen discovered that NBD incorrectly handled signals. A remote attacker could use this issue to cause NBD to crash, resulting in a denial of service. (CVE-2015-0847)
- Record
USN-2676-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nbdDebian:12 |
before 1:3.10-1 | 1:3.10-1 |
nbdDebian:13 |
before 1:3.10-1 | 1:3.10-1 |
nbdDebian:14 |
before 1:3.10-1 | 1:3.10-1 |
nbdDebian:6.0 |
before 1:2.9.16-8+squeeze2, plus listed versions 1:2.9.16-81:2.9.16-8+squeeze1 |
1:2.9.16-8+squeeze2 |
nbdDebian:7 |
before 1:3.2-4~deb7u5, plus listed versions 1:3.2-21:3.2-31:3.2-4~deb7u11:3.2-4~deb7u21:3.2-4~deb7u31:3.2-4~deb7u41:3.2-4~deb7u4~bpo60+11:3.2-4~deb7u5~bpo60+1 |
1:3.2-4~deb7u5 |
nbdDebian:8 |
before 1:3.8-4+deb8u1, plus listed versions 1:3.8-4 |
1:3.8-4+deb8u1 |
nbdUbuntu:14.04:LTS |
before 1:3.7-1ubuntu0.1, plus listed versions 1:3.3-3ubuntu11:3.4-1ubuntu11:3.4-2ubuntu11:3.5-1ubuntu11:3.6-1ubuntu11:3.7-1 |
1:3.7-1ubuntu0.1 |
nbdopenSUSE:Tumbleweed |
before 3.13-3.5 | 3.13-3.5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
debian.org/security/2015/dsa-3271
sourceforge.net/p/nbd/mailman/message/34091218
ubuntu.com/usn/USN-2676-1
lists.opensuse.org/opensuse-updates/2015-06/msg00003.html
openwall.com/lists/oss-security/2015/05/07/9
Show 9 moreShow less
nvd.nist.gov/vuln/detail/CVE-2015-0847
github.com/advisories/GHSA-m79m-w7q9-8mx9
security-tracker.debian.org/tracker/CVE-2015-0847
ubuntu.com/security/CVE-2015-0847
cve.org/CVERecord?id=CVE-2015-0847
suse.com/security/cve/CVE-2015-0847