← Vulnerability feed

Vulnerability record · CVE-2011-1925 · published 31 May 2011

CVE-2011-1925: Wouter verhelst nbd vulnerability

WWouter Verhelst · Nbd

nbd-server.c in Network Block Device (nbd-server) 2.9.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by causing a negotiation failure, as demonstrated by specifying a name for a non-existent export.

5.0 CVSS 2.0 Medium EPSS 2.5% · top 15.8%
5.0CVSS 2.0 base score
2.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

nbd-server.c in Network Block Device (nbd-server) 2.9.21 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by causing a negotiation failure, as demonstrated by specifying a name for a non-existent export.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627042.
http://nbd.git.sourceforge.net/git/gitweb.cgi?p=nbd/nbd%3Ba=commitdiff%3Bh=ebbbe0b3ce5393fa42a259f5e03d549508586aaa
http://security.gentoo.org/glsa/glsa-201206-35.xml
http://www.openwall.com/lists/oss-security/2011/05/17/1
http://www.securityfocus.com/bid/47884
https://exchange.xforce.ibmcloud.com/vulnerabilities/67502
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627042.
http://nbd.git.sourceforge.net/git/gitweb.cgi?p=nbd/nbd%3Ba=commitdiff%3Bh=ebbbe0b3ce5393fa42a259f5e03d549508586aaa
http://security.gentoo.org/glsa/glsa-201206-35.xml
http://www.openwall.com/lists/oss-security/2011/05/17/1
http://www.securityfocus.com/bid/47884
https://exchange.xforce.ibmcloud.com/vulnerabilities/67502

Track CVE-2011-1925 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2015-0847Canonical ubuntu linux vulnerabilitynbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of se…EPSS 3.1%7.8CVE-2013-7441Wouter verhelst nbd vulnerabilityThe modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a denial of service (root proce…EPSS 3.6%7.5CVE-2013-6410Wouter verhelst nbd permissions and access controls vulnerabilitynbd-server in Network Block Device (nbd) before 3.5 does not properly check IP addresses, which might allow remote attackers to bypass intended acces…EPSS 2.5%7.5CVE-2011-0530Wouter verhelst nbd memory buffer overflow vulnerabilityBuffer overflow in the mainloop function in nbd-server.c in the server in Network Block Device (nbd) before 2.9.20 might allow remote attackers to ex…EPSS 5.3%7.5CVE-2005-3534Wouter verhelst nbd memory buffer overflow vulnerabilityBuffer overflow in the Network Block Device (nbd) server 2.7.5 and earlier, and 2.8.0 through 2.8.2, allows remote attackers to execute arbitrary cod…EPSS 6.0%

Source: NIST National Vulnerability Database (record CVE-2011-1925), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.