272 matches found
MGASA-2024-0174 Updated libnbd packages fix security vulnerability
A flaw was found in libnbd. A server can reply with a block size larger than 2^63 the NBD spec states the size is a 64-bit unsigned value. This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the return value of the nbdgetsize function...
Oracle Linux 9 : libnbd (ELSA-2024-2204)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2204 advisory. - Fix assertion in ext-mode BLOCKSTATUS CVE-2023-5871 resolves: RHEL-15143 Tenable has extracted the preceding description block directly from the Orac...
libnbd security update
1.18.1-3 - Backport unit test of recent libnbd API addition resolves: RHEL-16292 1.18.1-2 - Fix assertion in ext-mode BLOCKSTATUS CVE-2023-5871 resolves: RHEL-15143 1.18.1-1 - Rebase to 1.18.1 resolves: RHEL-14476...
Moderate: Red Hat Security Advisory: libnbd security update
An update for libnbd is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
libnbd: Malicious NBD server may crash libnbd
A flaw was found in libnbd, due to a malicious Network Block Device NBD, a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to cause a Denial of Service...
ALSA-2024:2204 Moderate: libnbd security update
Network Block Device NBD is a protocol for accessing Block Devices hard disks and disk-like devices over a Network. The libnbd is a userspace client library for writing NBD clients. Security Fixes: libnbd: Malicious NBD server may crash libnbd CVE-2023-5871 libnbd: Crash or misbehaviour when NBD...
Moderate: libnbd security update
Network Block Device NBD is a protocol for accessing Block Devices hard disks and disk-like devices over a Network. The libnbd is a userspace client library for writing NBD clients. Security Fixes: libnbd: Malicious NBD server may crash libnbd CVE-2023-5871 libnbd: Crash or misbehaviour when NBD...
RHEL 9 : libnbd (RHSA-2024:2204)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2204 advisory. Network Block Device NBD is a protocol for accessing Block Devices hard disks and disk-like devices over a Network. The libnbd is a userspac...
CVE-2023-5215 affecting package libnbd for versions less than 1.12.1-3
CVE-2023-5215 affecting package libnbd for versions less than 1.12.1-3. A patched version of the package is available...
openSUSE: Security Advisory for libnbd (SUSE-SU-2023:4463-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for libnbd (SUSE-SU-2023:4222-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 9 : libnbd-1.12.4-3.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libnbd-1.12.4-3.el9 build changelog. - A flaw was found in the copying tool nbdcopy of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly...
CentOS 9 : libnbd-1.12.5-1.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libnbd-1.12.5-1.el9 build changelog. - A flaw was found in the copying tool nbdcopy of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly...
CentOS 9 : libnbd-1.12.6-1.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libnbd-1.12.6-1.el9 build changelog. - A flaw was found in the copying tool nbdcopy of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly...
Advisory ROSA-SA-2024-2327
Software: libnbd 1.6.0 OS: ROSA Virtualization 2.1 packageevrstring: libnbd-1.6.0-5.rv3.src.rpm CVE-ID: CVE-2022-0485 BDU-ID: 2022-01701 CVE-Crit: LOW CVE-DESC.: A vulnerability in the libnbd library's nbdcopy tool is related to an exception handling flaw. Exploitation of the vulnerability could...
CVE-2023-5871
A flaw was found in libnbd, due to a malicious Network Block Device NBD, a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to cause a Denial of Service...
Hardcoded credentials
A flaw was found in libnbd, due to a malicious Network Block Device NBD, a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to cause a Denial of Service...
UBUNTU-CVE-2023-5871
A flaw was found in libnbd, due to a malicious Network Block Device NBD, a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to cause a Denial of Service...
CVE-2023-5871
A flaw was found in libnbd, due to a malicious Network Block Device NBD, a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to cause a Denial of Service...
CVE-2023-5871
CVE-2023-5871: libnbd vulnerability where a malicious NBD server can crash or misbehave libnbd, causing a Denial of Service. Affected software includes libnbd in multiple distros (e.g., Red Hat/RHEL 9, Oracle Linux, AlmaLinux, SUSE/openSUSE, MiracleLinux) with advisories noting fixes in libnbd (e...