CVE-2005-3534
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8...
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.
- Record
CVE-2005-3534- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.
- Record
CVE-2005-3534- Updated
- 2026-11-02
EUVDEUVD-2005-3533 No score
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.
- Record
EUVD-2005-3533- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-96w8-f5p6-mqmw No score
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8...
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.
- Record
GHSA-96w8-f5p6-mqmw- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.
- Record
CVE-2005-3534- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-3534 No score
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.
- Record
DEBIAN-CVE-2005-3534- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11077-1 No score
nbd-3.21-1.7 on GA media
These are all security issues fixed in the nbd-3.21-1.7 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11077-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nbdDebian:12 |
before 1:2.8.3-1 | 1:2.8.3-1 |
nbdDebian:13 |
before 1:2.8.3-1 | 1:2.8.3-1 |
nbdDebian:14 |
before 1:2.8.3-1 | 1:2.8.3-1 |
nbdDebian:3.0 |
before 1.2cvs20020320-3.woody.3 | 1.2cvs20020320-3.woody.3 |
nbdDebian:3.1 |
before 1:2.7.3-3sarge1, plus listed versions 1:2.7.3-3 |
1:2.7.3-3sarge1 |
nbdopenSUSE:Tumbleweed |
before 3.21-1.7 | 3.21-1.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3534 is a high vulnerability (CVSS 7.5) in Wouter Verhelst Nbd, published December 21, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.99%, the 93rd percentile. Fixed in nbd 1:2.8.3-1.
References
secunia.com/advisories/43610
debian.org/security/2005/dsa-924
osvdb.org/21848
usn.ubuntu.com/237-1
Show 14 moreShow less
securityfocus.com/bid/16029
gentoo.org/security/en/glsa/glsa-200512-14.xml
sourceforge.net/project/shownotes.php?release_id=380210&group_id=13229
bugs.gentoo.org/show_bug.cgi?id=116314
nvd.nist.gov/vuln/detail/CVE-2005-3534
github.com/advisories/GHSA-96w8-f5p6-mqmw
security-tracker.debian.org/tracker/CVE-2005-3534
suse.com/security/cve/CVE-2005-3534