CVE-2025-47712

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.

This flaw was rated as having a Moderate severity by Red Hat Product Security team. While it can be triggered remotely (AV:N) with relative ease (AC:L), it requires the attacker to have valid credentials to the target (PR:L). Importantly, successful exploitation only leads to a temporary loss of service availability (A:L) and does not compromise data confidentiality (C:N) or integrity (I:N).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.