CVE catalog

CVE-2019-14842

libnbd affected and fixed versions

Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than the beginning of the request did not work because of signed/unsigned confusion. If one of these chunks contains a negative offset then data under control of the server is written to memory before the read buffer supplied by the client. If the read buffer is located on the stack then this allows the stack return address from nbd_pread() to be trivially modified, allowing arbitrary code execution under the control of the server. If the buffer is located on the heap then other memory objects before the buffer can be overwritten, which again would usually lead to arbitrary code execution.

Severity: High · CVSS 7.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Published: Oct 9, 2019, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 1.85% · Oct 27, 2026

Projects and upstream resources

[libnbd][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie	libnbd	`1.0.3-1`	FixedDistribution-reported fixed boundary	[CVE-2019-14842]
Debiantrixie	libnbd	`1.22.2-1`	Fixed	[CVE-2019-14842]
Debiansid	libnbd	`1.0.3-1`	FixedDistribution-reported fixed boundary	[CVE-2019-14842]
Debiansid	libnbd	`1.24.4-1`	Fixed	[CVE-2019-14842]
Debianforky	libnbd	`1.0.3-1`	FixedDistribution-reported fixed boundary	[CVE-2019-14842]
Debianforky	libnbd	`1.24.4-1`	Fixed	[CVE-2019-14842]
Debianbookworm	libnbd	`1.0.3-1`	FixedDistribution-reported fixed boundary	[CVE-2019-14842]
Debianbookworm	libnbd	`1.14.2-1`	Fixed	[CVE-2019-14842]

Showing 8 fix observations. All 9 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	libnbd	`1.0.3-1`	UnknownSource applicability is not established	Provider not reported
Debianbookworm	libnbd	`1.0.3-1`	FixedDistribution-reported fixed boundary	[CVE-2019-14842]
Debianbookworm	libnbd	`1.14.2-1`	Fixed	[CVE-2019-14842]
Debianforky	libnbd	`1.0.3-1`	FixedDistribution-reported fixed boundary	[CVE-2019-14842]
Debianforky	libnbd	`1.24.4-1`	Fixed	[CVE-2019-14842]
Debiansid	libnbd	`1.0.3-1`	FixedDistribution-reported fixed boundary	[CVE-2019-14842]
Debiansid	libnbd	`1.24.4-1`	Fixed	[CVE-2019-14842]
Debiantrixie	libnbd	`1.0.3-1`	FixedDistribution-reported fixed boundary	[CVE-2019-14842]
Debiantrixie	libnbd	`1.22.2-1`	Fixed	[CVE-2019-14842]

Original provider fields

{
  "package_releases": [
    {
      "name": "libnbd",
      "status": "fixed",
      "release": "sid",
      "version": "1.24.4-1"
    },
    {
      "name": "libnbd",
      "status": "fixed",
      "release": "forky",
      "version": "1.24.4-1"
    },
    {
      "name": "libnbd",
      "status": "fixed",
      "release": "trixie",
      "version": "1.22.2-1"
    },
    {
      "name": "libnbd",
      "status": "fixed",
      "release": "bookworm",
      "version": "1.14.2-1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 942215,
      "name": "libnbd",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "1.0.3-1"
    },
    {
      "bug": 942215,
      "name": "libnbd",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "1.0.3-1"
    },
    {
      "bug": 942215,
      "name": "libnbd",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "1.0.3-1"
    },
    {
      "bug": 942215,
      "name": "libnbd",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "1.0.3-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "libnbd",
      "fixed_version": "1.0.3-1",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #942215]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libnbd0]Unknown
Source package: [libnbd]
Details (2)
- 1.14.2-1 · amd64 · bookworm
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · bookworm; dsa · libnbd · debian · 12
- 1.14.2-1 · arm64 · bookworm
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · bookworm; dsa · libnbd · debian · 12
[libnbd-bin]Unknown
Source package: [libnbd]
Details (2)
- 1.14.2-1 · amd64 · bookworm
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · bookworm; dsa · libnbd · debian · 12
- 1.14.2-1 · arm64 · bookworm
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · bookworm; dsa · libnbd · debian · 12
[libnbd-dev]Unknown
Source package: [libnbd]
Details (2)
- 1.14.2-1 · amd64 · bookworm
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · bookworm; dsa · libnbd · debian · 12
- 1.14.2-1 · arm64 · bookworm
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · bookworm; dsa · libnbd · debian · 12
[libnbd-ocaml]Unknown
Source package: [libnbd]
Details (2)
- 1.14.2-1 · amd64 · bookworm
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · bookworm; dsa · libnbd · debian · 12
- 1.14.2-1 · arm64 · bookworm
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · bookworm; dsa · libnbd · debian · 12
[libnbd-ocaml-dev]Unknown
Source package: [libnbd]
Details (2)
- 1.14.2-1 · amd64 · bookworm
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · bookworm; dsa · libnbd · debian · 12
- 1.14.2-1 · arm64 · bookworm
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · bookworm; dsa · libnbd · debian · 12
[python3-libnbd]Unknown
Source package: [libnbd]
Details (2)
- 1.14.2-1 · amd64 · bookworm
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · bookworm; dsa · libnbd · debian · 12
- 1.14.2-1 · arm64 · bookworm
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · bookworm; dsa · libnbd · debian · 12

[Debian 13 (Trixie)]

[libnbd0]Unknown
Source package: [libnbd]
Details (2)
- 1.22.2-1+b1 · amd64 · trixie
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · 13
- 1.22.2-1+b1 · arm64 · trixie
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · 13
[libnbd-bin]Unknown
Source package: [libnbd]
Details (2)
- 1.22.2-1+b1 · amd64 · trixie
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · 13
- 1.22.2-1+b1 · arm64 · trixie
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · 13
[libnbd-dev]Unknown
Source package: [libnbd]
Details (2)
- 1.22.2-1+b1 · amd64 · trixie
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · 13
- 1.22.2-1+b1 · arm64 · trixie
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · 13
[libnbd-ocaml]Unknown
Source package: [libnbd]
Details (2)
- 1.22.2-1+b1 · amd64 · trixie
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · 13
- 1.22.2-1+b1 · arm64 · trixie
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · 13
[libnbd-ocaml-dev]Unknown
Source package: [libnbd]
Details (2)
- 1.22.2-1+b1 · amd64 · trixie
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · 13
- 1.22.2-1+b1 · arm64 · trixie
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · 13
[python3-libnbd]Unknown
Source package: [libnbd]
Details (2)
- 1.22.2-1+b1 · amd64 · trixie
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · 13
- 1.22.2-1+b1 · arm64 · trixie
  Fixed · Fixed: 1.0.3-1
  dsa · libnbd · debian · 13

Observed: Oct 23, 2026, 5:40:24 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]