CVE-2005-3534
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8...
CVE-2005-3534 is a high vulnerability (CVSS 7.5) in Wouter Verhelst Nbd, published December 21, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.99%, the 93rd percentile. Fixed in nbd 1:2.8.3-1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 5.99%EPSS, 93rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1:2.8.3-1nbd +5 more
Description
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nbdDebian:12 | before 1:2.8.3-1 | 1:2.8.3-1 |
nbdDebian:13 | before 1:2.8.3-1 | 1:2.8.3-1 |
nbdDebian:14 | before 1:2.8.3-1 | 1:2.8.3-1 |
nbdDebian:3.0 | before 1.2cvs20020320-3.woody.3 | 1.2cvs20020320-3.woody.3 |
nbdDebian:3.1 | before 1:2.7.3-3sarge1, plus listed versions 1:2.7.3-3 | 1:2.7.3-3sarge1 |
nbdopenSUSE:Tumbleweed | before 3.21-1.7 | 3.21-1.7 |
What each source reports
NVD Score used
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.
- Record
CVE-2005-3534- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.
- Record
CVE-2005-3534- Updated
- 2026-11-02
EUVDEUVD-2005-3533No score
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.
- Record
EUVD-2005-3533- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-96w8-f5p6-mqmwNo score
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8...
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.
- Record
GHSA-96w8-f5p6-mqmw- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.
- Record
CVE-2005-3534- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-3534No score
Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.
- Record
DEBIAN-CVE-2005-3534- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11077-1No score
nbd-3.21-1.7 on GA media
These are all security issues fixed in the nbd-3.21-1.7 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11077-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/43610
debian.org/security/2005/dsa-924
osvdb.org/21848
usn.ubuntu.com/237-1
Show 14 moreShow less
securityfocus.com/bid/16029
gentoo.org/security/en/glsa/glsa-200512-14.xml
sourceforge.net/project/shownotes.php?release_id=380210&group_id=13229
bugs.gentoo.org/show_bug.cgi?id=116314
nvd.nist.gov/vuln/detail/CVE-2005-3534
github.com/advisories/GHSA-96w8-f5p6-mqmw
security-tracker.debian.org/tracker/CVE-2005-3534
suse.com/security/cve/CVE-2005-3534