CVE-2005-3534: Wouter Verhelst Nbd

High severity, CVSS 7.5. EPSS: 6% chance of exploitation in the next 30 days.

Buffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary code via a large request, which is written past the end of the buffer because nbd does not account for memory taken by the reply header.

Affected products

• Wouter Verhelst Nbd: up to and including 2.7.5; version 2.8.0 only; version 2.8.2 only

Published 2005-12-22. Last modified 2026-06-16.