Lucene search

K
oraclelinuxOracleLinuxELSA-2024-6757
HistorySep 19, 2024 - 12:00 a.m.

libnbd security update

2024-09-1900:00:00
linux.oracle.com
1
libnbd security update
content addition
nbd_connect_uri.pod
cve-2024-7383
rhel-52730
improper certificate validation

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

10.9%

[1.18.1-4.0.1]

  • Add new content to nbd_connect_uri.pod
    [1.18.1-4]
  • Fix CVE-2024-7383 NBD server improper certificate validation
    resolves: RHEL-52730

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

10.9%