USN-1155-1: NBD vulnerability
21 June 2011
An attacker could send crafted input to NBD and cause it to crash or to run arbitrary programs.
Releases
Packages
- nbd - Network Block Device protocol
Details
It was discovered that NBD incorrectly handled certain long requests. A
remote attacker could use this flaw to cause NBD to crash, resulting in
a denial of service, or possibly execute arbitrary code.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 8.04
Ubuntu 10.10
Ubuntu 10.04
After a standard system update you need to restart NBD to make all the
necessary changes.