CVE-2022-0485

A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as successful, rather than checking the *error parameter. This could result in the silent creation of a corrupted destination image.

• CWE-252
• CWE-252

• https://access.redhat.com/security/cve/CVE-2022-0485Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2046194Exploit, Issue Tracking, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2050324Issue Tracking, Vendor Advisory
• https://gitlab.com/nbdkit/libnbd/-/commit/8d444b41d09a700c7ee6f9182a649f3f2d325abbPatch, Third Party Advisory
• https://listman.redhat.com/archives/libguestfs/2022-February/msg00104.htmlPatch, Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2022-0485Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2046194Exploit, Issue Tracking, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2050324Issue Tracking, Vendor Advisory
• https://gitlab.com/nbdkit/libnbd/-/commit/8d444b41d09a700c7ee6f9182a649f3f2d325abbPatch, Third Party Advisory
• https://listman.redhat.com/archives/libguestfs/2022-February/msg00104.htmlPatch, Vendor Advisory

Published

Aug 29, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0479The Popup Builder WordPress plugin before 4.1.1 does not san…9.8
• CVE-2022-0480A flaw was found in the filelock_init in fs/locks.c function…5.5
• CVE-2022-0481NULL Pointer Dereference in Homebrew mruby prior to 3.2.7.5
• CVE-2022-0482Exposure of Private Personal Information to an Unauthorized …9.1
• CVE-2022-0483Local privilege escalation due to insecure folder permission…7.8
• CVE-2022-0484Lack of validation of URLs causes Mirantis Container Cloud L…8.8
• CVE-2022-0486Improper file permissions in the CommandPost, Collector, Sen…7.8
• CVE-2022-0487A use-after-free vulnerability was found in rtsx_usb_ms_drv_…5.5
• CVE-2022-0488An issue has been discovered in GitLab CE/EE affecting all v…4.3
• CVE-2022-0489An issue has been discovered in GitLab CE/EE affecting all v…5.7
• CVE-2022-0492A vulnerability was found in the Linux kernel’s cgroup_relea…7.8
• CVE-2022-0493The String locator WordPress plugin before 2.5.0 does not pr…4.9