A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-bit unsigned value). This issue could lead to an application crash or other unintended behavior for NBD clients that doesnt treat the return value of the nbd_get_size() function correctly.
The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libnbd | Redhat | * | 1.18.0 (excluding) |
| Enterprise_linux | Redhat | 8.0 (including) | 8.0 (including) |
| Enterprise_linux | Redhat | 9.0 (including) | 9.0 (including) |
| Libnbd | Ubuntu | bionic | * |
| Libnbd | Ubuntu | lunar | * |
| Libnbd | Ubuntu | mantic | * |
| Libnbd | Ubuntu | trusty | * |
| Libnbd | Ubuntu | xenial | * |
| Red Hat Enterprise Linux 9 | RedHat | libnbd-0:1.18.1-3.el9 | * |