Gentoo Linux Security Advisory GLSA 200512-14 - Kurt Fitzner discovered that the NBD server allocates a request buffer that fails to take into account the size of the reply header. Versions less than 2.8.2-r1 are affected.
f51c8751a3f7823008f98bb956154051b645e9743fd0e823c927063e7e8cad30