AZL-63878
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-63878.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-63878
- Upstream
- Published
- 2025-06-09T06:15:25Z
- Modified
- 2026-04-21T04:32:14.532927Z
- Summary
- CVE-2025-47711 affecting package nbdkit for versions less than 1.35.3-4
- Details
-
There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.
- References