7.8
CVE-2015-0847
- EPSS 3.16%
- Veröffentlicht 29.05.2015 15:59:12
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle security@debian.org
- CVE-Watchlists
- Unerledigt
Loginnbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.10
Canonical ≫ Ubuntu Linux Version15.04
Wouter Verhelst ≫ Nbd Version <= 3.10
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.16% | 0.864 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
http://www.ubuntu.com/usn/USN-2676-1
http://lists.opensuse.org/opensuse-updates/2015-06/msg00003.html
http://www.debian.org/security/2015/dsa-3271
http://sourceforge.net/p/nbd/mailman/message/34091218/
http://sourceforge.net/projects/nbd/files/nbd/3.11/
http://www.openwall.com/lists/oss-security/2015/05/07/9