CVE-2011-0530
Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device ...
Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.
- Record
CVE-2011-0530- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.
- Record
CVE-2011-0530- Updated
- 2026-11-02
EUVDEUVD-2011-0549 No score
Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.
- Record
EUVD-2011-0549- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8p8p-8qmp-rfr2 No score
Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device ...
Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.
- Record
GHSA-8p8p-8qmp-rfr2- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.
- Record
CVE-2011-0530- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-0530 No score
Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.
- Record
DEBIAN-CVE-2011-0530- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-0530 is a high vulnerability (CVSS 7.5) in Wouter Verhelst Nbd, published February 22, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.28%, the 92nd percentile. Fixed in nbd 1:2.9.16-8.
References
security.gentoo.org/glsa/glsa-201206-35.xml
github.com/yoe/nbd/commit/3ef52043861ab16352d49af89e048ba6339d6df8
secunia.com/advisories/43610
lists.fedoraproject.org/pipermail/package-announce/2011-February/054071.html
vupen.com/english/advisories/2011/0403
bugzilla.redhat.com/show_bug.cgi?id=673562
Show 14 moreShow less
openwall.com/lists/oss-security/2011/01/28/3
lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
exchange.xforce.ibmcloud.com/vulnerabilities/65720
bugs.debian.org/cgi-bin/bugreport.cgi?bug=611187
securityfocus.com/bid/46572
hermes.opensuse.org/messages/8086846
debian.org/security/2011/dsa-2183
nvd.nist.gov/vuln/detail/CVE-2011-0530
security-tracker.debian.org/tracker/CVE-2011-0530