Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-63798.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-63798
Upstream
Published
2025-06-09T06:15:25Z
Modified
2026-04-21T04:32:13.491284Z
Summary
CVE-2025-47712 affecting package nbdkit for versions less than 1.35.3-7
Details

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.

References

Affected packages

Azure Linux:3 / nbdkit

Package

Name
nbdkit
Purl
pkg:rpm/azure-linux/nbdkit

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.35.3-7

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-63798.json"