{"id":"CVE-2025-47712","aliases":["AZL-63798","AZL-63875","CLSA-2026-1777021155","DEBIAN-CVE-2025-47712","EUVD-2025-17436","GHSA-fpfc-3gjg-hfhp","OESA-2025-1777","OESA-2025-1778","OESA-2025-1779","OESA-2025-1780","OESA-2025-1781","SUSE-SU-2025:01888-1","SUSE-SU-2025:01889-1","UBUNTU-CVE-2025-47712","openSUSE-SU-2025:15088-1"],"status":"published","title":"Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service","description":"A flaw exists in the nbdkit \"blocksize\" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00527,"percentile":0.44908,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2025-05-14T00:00:00Z","modified":"2026-11-06T10:04:00Z","fixes":[{"ecosystem":"Azure Linux:3","package":"nbdkit","fixed_in":["1.35.3-7"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"nbdkit","fixed_in":["1.35.3-4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-bash-completion","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-basic-filters","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-basic-plugins","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-blkio-plugin","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-curl-plugin","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-devel","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-example-plugins","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-gzip-filter","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-linuxdisk-plugin","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-nbd-plugin","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-python-plugin","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-selinux","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-server","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-srpm-macros","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-ssh-plugin","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-stats-filter","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-tar-filter","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-tmpdisk-plugin","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-vddk-plugin","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-xz-filter","fixed_in":["1.38.5-5.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nbdkit","fixed_in":["1.42.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nbdkit","fixed_in":["1.42.3-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.3-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.3-4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-bash-completion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-basic-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-basic-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-blkio-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-curl-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-example-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-gzip-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-linuxdisk-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-nbd-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-srpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-ssh-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-stats-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-tar-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-tmpdisk-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-vddk-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"nbdkit-xz-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.5-5.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.32.5-1","1.34.0-1","1.34.1-1","1.34.2-1","1.34.2-10","1.34.2-2","1.34.2-3","1.34.2-4","1.34.2-5","1.34.2-6","1.34.2-7","1.34.2-8","1.34.2-9","1.34.3-1","1.34.4-1","1.36.0-1","1.36.1-1","1.36.2-1","1.36.3-1","1.38.0-1","1.38.1-1","1.38.2-1","1.38.2-2","1.38.3-1","1.40.0-1","1.40.2-1","1.40.2-2","1.40.3-1","1.40.4-1","1.40.4-10","1.40.4-11","1.40.4-2","1.40.4-3","1.40.4-4","1.40.4-5","1.40.4-6","1.40.4-7","1.40.4-8","1.40.4-9","1.40.5-1","1.42.0-1","1.42.1-1","1.42.2-1","1.42.3-1","1.42.4-1","1.42.6-1","1.42.9-1","1.46.2-1","1.46.2-2","1.46.2-3","1.46.2-4","1.46.2-5","1.46.2-6","1.46.2-7","1.48.0-1","1.48.1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.3-1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.11-2.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.11-2.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.32.6-2.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.32.6-2.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.32.6-2.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.6-150700.4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.5-150400.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.5-150400.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.10-1","1.1.11-1","1.1.11-1build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.4-1","1.12.4-1build1","1.14.2-3","1.16.1-2","1.16.1-3","1.16.1-3ubuntu1","1.16.2-1ubuntu1","1.16.2-1ubuntu2","1.16.2-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.24.1-2ubuntu1","1.24.1-2ubuntu2","1.24.1-2ubuntu3","1.24.1-2ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.34.4-1ubuntu1","1.36.1-1ubuntu1","1.36.2-1ubuntu1","1.36.3-1ubuntu2","1.36.3-1ubuntu3","1.36.3-1ubuntu9","1.36.3-1ubuntu10"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.42.2-1ubuntu1","1.42.3-1ubuntu1","1.42.4-1ubuntu1","1.42.6-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.46.2-1ubuntu2","1.46.2-4ubuntu1","1.46.2-5ubuntu1","1.46.2-7ubuntu1","1.48.0-1ubuntu1","1.48.0-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.42.6-1ubuntu1","1.42.9-1ubuntu1","1.42.9-1ubuntu2","1.46.2-1ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.3-1.1"}]}],"bundled":2}],"products":[{"vendor":"nbdkit_project","product":"nbdkit"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8 advanced virtualization"},{"vendor":"red hat","product":"red hat enterprise linux 9"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-47712","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365724","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.libguestfs.org/archives/list/guestfs@lists.libguestfs.org/thread/67E7AASHHADIY7VAD3FFW2I67LTWVWYF/","tags":["Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47712","tags":["web","advisory"]},{"url":"https://lists.libguestfs.org/archives/list/guestfs@lists.libguestfs.org/thread/67E7AASHHADIY7VAD3FFW2I67LTWVWYF"},{"url":"https://github.com/advisories/GHSA-fpfc-3gjg-hfhp"},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1777021155.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-47712","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1777","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47711","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1778","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1779","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1780","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1781","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501888-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243108","tags":["report"]},{"url":"https://bugzilla.suse.com/1243110","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47712","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501889-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-47712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-47712","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/35ISLYGXHGFGVDVM6QO5OV57OJ34JTFG/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-47712","title":"Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service","description":"A flaw exists in the nbdkit \"blocksize\" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.","status":"published","published":"2025-06-09T05:58:41.198Z","modified":"2026-11-05T15:49:54.806Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-05T16:36:33.176634Z"}],"euvd":[{"id":"EUVD-2025-17436","description":"A flaw exists in the nbdkit \"blocksize\" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.","status":"published","published":"2025-06-09T05:58:41Z","modified":"2026-11-05T15:49:54Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T18:00:59.460287Z"}],"ghsa":[{"id":"GHSA-fpfc-3gjg-hfhp","title":"A flaw exists in the nbdkit \"blocksize\" filter that can be triggered by a specific type of client...","description":"A flaw exists in the nbdkit \"blocksize\" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.","status":"published","published":"2025-06-09T06:30:22Z","modified":"2025-07-29T21:31:40Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:03:08.457948Z"}],"nvd":[{"id":"CVE-2025-47712","description":"A flaw exists in the nbdkit \"blocksize\" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.","status":"published","published":"2025-06-09T06:15:25.537Z","modified":"2026-11-05T16:17:17.09Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-05T19:55:50.758755Z"}],"osv":[{"id":"CVE-2025-47712","description":"A flaw exists in the nbdkit \"blocksize\" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.","status":"published","published":"2025-06-09T06:15:25.537Z","modified":"2026-03-23T05:08:21.013812Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:49.707645Z"},{"id":"DEBIAN-CVE-2025-47712","description":"A flaw exists in the nbdkit \"blocksize\" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.","status":"published","published":"2025-06-09T06:15:25.537Z","modified":"2026-11-06T10:04:00.502378264Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-06T10:38:22.758306Z"},{"id":"OESA-2025-1777","title":"nbdkit security update","description":"NBD (Network Block Device) is a protocol for accessing Block Devices (hard disks and disk-like things) over a Network. nbdkit is a toolkit for creating NBD servers. The key features are:  * Multithreaded NBD server written in C with good performance.  * Minimal dependencies for the basic server.  * Liberal license (BSD) allows nbdkit to be linked to proprietary libraries or included in proprietary code.  * Well-documented, simple plugin API with a stable ABI guarantee. Lets you export “unconventional”    block devices easily.  * You can write plugins in C, Lua, Perl, Python, OCaml, Ruby, Rust, shell script or Tcl.  * Filters can be stacked in front of plugins to transform the output.\r\n\r\nSecurity Fix(es):\n\nThere\u0026apos;s a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.(CVE-2025-47711)\n\nA flaw exists in the nbdkit \u0026quot;blocksize\u0026quot; filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.(CVE-2025-47712)","status":"published","published":"2025-07-11T11:08:51Z","modified":"2026-08-18T01:18:53.170145302Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1778","title":"nbdkit security update","description":"NBD (Network Block Device) is a protocol for accessing Block Devices (hard disks and disk-like things) over a Network. nbdkit is a toolkit for creating NBD servers. The key features are:  * Multithreaded NBD server written in C with good performance.  * Minimal dependencies for the basic server.  * Liberal license (BSD) allows nbdkit to be linked to proprietary libraries or included in proprietary code.  * Well-documented, simple plugin API with a stable ABI guarantee. Lets you export “unconventional”    block devices easily.  * You can write plugins in C, Lua, Perl, Python, OCaml, Ruby, Rust, shell script or Tcl.  * Filters can be stacked in front of plugins to transform the output.\r\n\r\nSecurity Fix(es):\n\nThere\u0026apos;s a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.(CVE-2025-47711)\n\nA flaw exists in the nbdkit \u0026quot;blocksize\u0026quot; filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.(CVE-2025-47712)","status":"published","published":"2025-07-11T11:08:51Z","modified":"2026-08-18T01:18:53.149719254Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1779","title":"nbdkit security update","description":"NBD (Network Block Device) is a protocol for accessing Block Devices (hard disks and disk-like things) over a Network. nbdkit is a toolkit for creating NBD servers. The key features are:  * Multithreaded NBD server written in C with good performance.  * Minimal dependencies for the basic server.  * Liberal license (BSD) allows nbdkit to be linked to proprietary libraries or included in proprietary code.  * Well-documented, simple plugin API with a stable ABI guarantee. Lets you export “unconventional”    block devices easily.  * You can write plugins in C, Lua, Perl, Python, OCaml, Ruby, Rust, shell script or Tcl.  * Filters can be stacked in front of plugins to transform the output.\r\n\r\nSecurity Fix(es):\n\nThere\u0026apos;s a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.(CVE-2025-47711)\n\nA flaw exists in the nbdkit \u0026quot;blocksize\u0026quot; filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.(CVE-2025-47712)","status":"published","published":"2025-07-11T11:08:51Z","modified":"2026-08-18T01:18:52.753731854Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1780","title":"nbdkit security update","description":"NBD (Network Block Device) is a protocol for accessing Block Devices (hard disks and disk-like things) over a Network. nbdkit is a toolkit for creating NBD servers. The key features are:  * Multithreaded NBD server written in C with good performance.  * Minimal dependencies for the basic server.  * Liberal license (BSD) allows nbdkit to be linked to proprietary libraries or included in proprietary code.  * Well-documented, simple plugin API with a stable ABI guarantee. Lets you export “unconventional”    block devices easily.  * You can write plugins in C, Lua, Perl, Python, OCaml, Ruby, Rust, shell script or Tcl.  * Filters can be stacked in front of plugins to transform the output.\r\n\r\nSecurity Fix(es):\n\nThere\u0026apos;s a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.(CVE-2025-47711)\n\nA flaw exists in the nbdkit \u0026quot;blocksize\u0026quot; filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.(CVE-2025-47712)","status":"published","published":"2025-07-11T11:08:52Z","modified":"2026-08-18T01:18:53.145170861Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1781","title":"nbdkit security update","description":"NBD (Network Block Device) is a protocol for accessing Block Devices (hard disks and disk-like things) over a Network. nbdkit is a toolkit for creating NBD servers. The key features are:  * Multithreaded NBD server written in C with good performance.  * Minimal dependencies for the basic server.  * Liberal license (BSD) allows nbdkit to be linked to proprietary libraries or included in proprietary code.  * Well-documented, simple plugin API with a stable ABI guarantee. Lets you export “unconventional”    block devices easily.  * You can write plugins in C, Lua, Perl, Python, OCaml, Ruby, Rust, shell script or Tcl.  * Filters can be stacked in front of plugins to transform the output.\r\n\r\nSecurity Fix(es):\n\nThere\u0026apos;s a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.(CVE-2025-47711)\n\nA flaw exists in the nbdkit \u0026quot;blocksize\u0026quot; filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.(CVE-2025-47712)","status":"published","published":"2025-07-11T11:08:52Z","modified":"2026-08-18T01:18:53.177215641Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"UBUNTU-CVE-2025-47712","description":"A flaw exists in the nbdkit \"blocksize\" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.","status":"published","published":"2025-06-09T06:15:00Z","modified":"2026-10-17T12:57:04.04361967Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:50.31802Z"},{"id":"AZL-63798","title":"CVE-2025-47712 affecting package nbdkit for versions less than 1.35.3-7","description":"A flaw exists in the nbdkit \"blocksize\" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.","status":"published","published":"2025-06-09T06:15:25Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"AZL-63875","title":"CVE-2025-47712 affecting package nbdkit for versions less than 1.35.3-4","description":"A flaw exists in the nbdkit \"blocksize\" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.","status":"published","published":"2025-06-09T06:15:25Z","modified":"2026-04-21T04:32:14.507155Z","updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"CLSA-2026-1777021155","title":"nbdkit: Fix of CVE-2025-47712","description":"- CVE-2025-47712: fix integer overflow in blocksize filter extents callback","status":"published","published":"2026-04-24T08:59:20Z","modified":"2026-06-01T00:32:48.650619539Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"openSUSE-SU-2025:15088-1","title":"nbdkit-1.42.3-1.1 on GA media","description":"These are all security issues fixed in the nbdkit-1.42.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-14T00:00:00Z","modified":"2026-03-23T04:53:24.14513Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01888-1","title":"Security update for nbdkit","description":"This update for nbdkit fixes the following issues:\n\nUpdate to version 1.40.6.\n\nSecurity fixes:\n\n- CVE-2025-47712: integer overflow in blocksize filter when processing client block status requests larger than 2**32\n  will trigger an assertion failure and cause a denial-of-service. (bsc#1243108).\n- CVE-2025-47711: off-by-one error when processing block status results from plugins on behalf of an NBD client may\n  trigger an assertion failure and cause a denial of service (bsc#1243110).\n\nOther fixes and changes:\n\n- golang: Support GCC 15.\n- openbsd: curl: Include pthread.h.\n- rust: Fix 'overindented' list in comment.\n- rust: Declare explicit extern 'C' API.\n- plugins/rust: Use CStr literals for static strings.\n- vddk: do_extents: Avoid reading partial chunk beyond the end of the disk.\n- vddk: do_extents: Exit the function if we hit req_one condition.\n- vddk: do_extents: Mark some local variables const.\n- vddk: Cache the disk size in the handle.\n- vddk: Include \u003cstdbool.h\u003e.\n- python: examples: Fix comment above API_VERSION constant.\n- tcl: Fix for Tcl 9.0 compatibility.\n- plugins/ocaml/NBDKit.ml: Sort bindings into order.\n- ocaml: Don't call abort if caml_c_thread_unregister fails.\n- ocaml: Use real addresses instead of (void*)\u003cconstant\u003es.\n- evil: Link to nbdkit_parse_probability(3).\n","status":"published","published":"2025-06-11T05:43:28Z","modified":"2025-06-11T14:14:23.241689Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01889-1","title":"Security update for nbdkit","description":"This update for nbdkit fixes the following issues:\n\nUpdate to version 1.36.5.\n\nSecurity fixes:\n\n- CVE-2025-47712: integer overflow in blocksize filter when processing client block status requests larger than 2**32\n  will trigger an assertion failure and cause a denial-of-service. (bsc#1243108).\n- CVE-2025-47711: off-by-one error when processing block status results from plugins on behalf of an NBD client may\n  trigger an assertion failure and cause a denial of service (bsc#1243110).\n\nOther fixes and changes:\n\n- tests: Add test-blkio.sh to unconditional EXTRA_DIST rule.\n- Revert 'valgrind: Add suppression for liblzma bug'.\n- vddk: Move 'Unknown error' information to the manual.\n- ocaml Add better comments to the example plugin.\n- ocaml: Simplify pread operation.\n- ocaml: Define a struct handle to hold the OCaml handle.\n- ocaml: Add OCaml version to --dump-plugin output.\n- ocaml: Print callback name when an exception is printed.\n- ocaml: Combine all exception printing into a single macro.\n","status":"published","published":"2025-06-11T05:43:35Z","modified":"2026-02-04T03:24:22.665018Z","updated_at":"2026-11-02T15:53:56.647031Z"}]}}