Moderate: libnbd security update

2024-04-3000:00:00

errata.almalinux.org

libnbd

nbd protocol

security fix

crash

misbehaviour

cvss score

almalinux

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.0%

JSON

Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients.

Security Fix(es):

libnbd: Malicious NBD server may crash libnbd (CVE-2023-5871)
libnbd: Crash or misbehaviour when NBD server returns an unexpected block size (CVE-2023-5215)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9noarchlibnbd-bash-completion< 1.18.1-3.el9libnbd-bash-completion-1.18.1-3.el9.noarch.rpm
almalinux9i686libnbd< 1.18.1-3.el9libnbd-1.18.1-3.el9.i686.rpm
almalinux9ppc64lepython3-libnbd< 1.18.1-3.el9python3-libnbd-1.18.1-3.el9.ppc64le.rpm
almalinux9ppc64lenbdfuse< 1.18.1-3.el9nbdfuse-1.18.1-3.el9.ppc64le.rpm
almalinux9ppc64lelibnbd< 1.18.1-3.el9libnbd-1.18.1-3.el9.ppc64le.rpm
almalinux9x86_64libnbd< 1.18.1-3.el9libnbd-1.18.1-3.el9.x86_64.rpm
almalinux9x86_64python3-libnbd< 1.18.1-3.el9python3-libnbd-1.18.1-3.el9.x86_64.rpm
almalinux9x86_64nbdfuse< 1.18.1-3.el9nbdfuse-1.18.1-3.el9.x86_64.rpm
almalinux9aarch64nbdfuse< 1.18.1-3.el9nbdfuse-1.18.1-3.el9.aarch64.rpm
almalinux9aarch64python3-libnbd< 1.18.1-3.el9python3-libnbd-1.18.1-3.el9.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	noarch	libnbd-bash-completion	< 1.18.1-3.el9	libnbd-bash-completion-1.18.1-3.el9.noarch.rpm
almalinux	9	i686	libnbd	< 1.18.1-3.el9	libnbd-1.18.1-3.el9.i686.rpm
almalinux	9	ppc64le	python3-libnbd	< 1.18.1-3.el9	python3-libnbd-1.18.1-3.el9.ppc64le.rpm
almalinux	9	ppc64le	nbdfuse	< 1.18.1-3.el9	nbdfuse-1.18.1-3.el9.ppc64le.rpm
almalinux	9	ppc64le	libnbd	< 1.18.1-3.el9	libnbd-1.18.1-3.el9.ppc64le.rpm
almalinux	9	x86_64	libnbd	< 1.18.1-3.el9	libnbd-1.18.1-3.el9.x86_64.rpm
almalinux	9	x86_64	python3-libnbd	< 1.18.1-3.el9	python3-libnbd-1.18.1-3.el9.x86_64.rpm
almalinux	9	x86_64	nbdfuse	< 1.18.1-3.el9	nbdfuse-1.18.1-3.el9.x86_64.rpm
almalinux	9	aarch64	nbdfuse	< 1.18.1-3.el9	nbdfuse-1.18.1-3.el9.aarch64.rpm
almalinux	9	aarch64	python3-libnbd	< 1.18.1-3.el9	python3-libnbd-1.18.1-3.el9.aarch64.rpm