AZL-63875

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-63875.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-63875

Upstream

CVE-2025-47712

Published

2025-06-09T06:15:25Z

Modified

2026-04-21T04:32:14.507155Z

Summary

CVE-2025-47712 affecting package nbdkit for versions less than 1.35.3-4

Details

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-47712

Affected packages

Azure Linux:2 / nbdkit

Package

Name: nbdkit
Purl: pkg:rpm/azure-linux/nbdkit

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.35.3-4

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-63875.json"