CVE-2011-0530: Wouter Verhelst Nbd

High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days.

Buffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to execute arbitrary code via a long request. NOTE: this issue exists because of a CVE-2005-3534 regression.

Affected products

• Wouter Verhelst Nbd: up to and including 2.9.19; version 2.9.0 only; version 2.9.1 only; version 2.9.2 only; version 2.9.3 only; version 2.9.4 only; …

Published 2011-02-22. Last modified 2026-06-16.