Lucene search

K
osvGoogleOSV:SUSE-SU-2024:2813-1
HistoryAug 07, 2024 - 10:01 a.m.

Security update for libnbd

2024-08-0710:01:38
Google
osv.dev

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

7.3

Confidence

High

This update for libnbd fixes the following issues:

  • CVE-2024-7383: Fixed incorrect verification of a NBD server’s certificate when using TLS to connect to the server (bsc#1228872)

Other fixes:

  • Update to version 1.18.5.

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

7.3

Confidence

High