nbdkit
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-47711 | 1.11.10 – < 1.38.6 ; 1.40.0 – < 1.40.6 ; 1.42.0 – < 1.42.3 | Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service | MEDIUM 6.5 | 0.5 % | ||
| CVE-2025-47712 | 1.21.16 – < 1.38.6 ; 1.40.0 – < 1.40.6 ; 1.42.0 – < 1.42.3 | Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service | MEDIUM 6.5 | 0.5 % | ||
| CVE-2021-3716 | Affects nbdkit v1.12 through v1.26.4 | Fixedin nbdkit v1.26.5 | A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use t | LOW 3.1 | 0.6 % | ||
| CVE-2019-14851 | nbdkit 1.12.8, nbdkit 1.14.2, nbdkit 1.15.2 | A denial of service vulnerability was discovered in nbdkit. A client issuing a certain sequence of commands could possibly trigger an assert | MEDIUM 6.5 | 1.0 % | ||
| CVE-2019-14850 | nbdkit 1.12.7, nbdkit 1.14.1, nbdkit 1.15.1 | A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and ca | LOW 3.7 | 1.6 % |