Theres a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.
Weakness
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Nbdkit | Nbdkit_project | - (including) | - (including) |
| Nbdkit | Ubuntu | focal | * |
| Nbdkit | Ubuntu | oracular | * |
| Nbdkit | Ubuntu | plucky | * |