Vulnerabilities

TI-2025-30208 CVE-2025-47711 · GHSA-c8xj-fr2w-pjfc

Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service

LOW 29

There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00484 Published 2025-06-09 Partial fix · 1.38.6, 1.40.6 +1 CWE-193

TI-2025-30209 CVE-2025-47712 · GHSA-fpfc-3gjg-hfhp

LOW 29

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00527 Published 2025-06-09 Partial fix · 1.38.6, 1.40.6 +1 CWE-190

TI-2021-02650 CVE-2021-3716 · GHSA-3vpg-mwgf-4jvj

LOW 16

A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00582 Published 2022-03-02 Partial fix CWE-924

TI-2019-11055 CVE-2019-14851 · GHSA-hj75-x8cx-fm4w

LOW 31

A denial of service vulnerability was discovered in nbdkit.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00988 Published 2021-03-18 No fix listed CWE-617

TI-2019-11054 CVE-2019-14850 · GHSA-j552-f62v-mc74

LOW 21

A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01601 Published 2021-03-18 Partial fix CWE-406