Lucene search
+L

272 matches found

BDU FSTEC
BDU FSTEC
•added 2024/08/07 12:00 a.m.•16 views

The vulnerability of the nbd_get_size() function in the libnbd library, which allows a hacker to cause a service failure

The vulnerability of the nbdgetsize function in the libnbd library is related to responses received by the server from blocks that are larger than 2^63 bytes. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

6.5CVSS6.3AI score0.00806EPSS
SaveExploits1References10Affected Software6
Tenable Nessus
Tenable Nessus
•added 2024/08/07 12:00 a.m.•24 views

openSUSE 15: libnbd / libnbd-bash-completion / libnbd-devel / libnbd0 / nbdfuse / etc (SUSE-SU-2024:2789-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:2789-1 advisory. - CVE-2024-7383: Fixed incorrect verification of a NBD server's certificate when using TLS to connect to the server bsc1228872 Other fixes: - Update to versi...

7.4CVSS7.2AI score0.0039EPSS
SaveExploits0References4
OSV
OSV
•added 2024/08/06 2:10 p.m.•23 views

SUSE-SU-2024:2789-1 Security update for libnbd

This update for libnbd fixes the following issues: - CVE-2024-7383: Fixed incorrect verification of a NBD server's certificate when using TLS to connect to the server bsc1228872 Other fixes: - Update to version 1.18.5...

7.4CVSS7.5AI score0.0039EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2024/08/06 2:12 a.m.•7 views

SUSE CVE-2024-7383

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic...

7.4CVSS6.5AI score0.0039EPSS
SaveExploits0References6
Redos
Redos
•added 2024/08/06 12:00 a.m.•15 views

ROS-20240806-08

A vulnerability in the libnbd library's nbdgetsize function is related to the responses received by the server, a block of larger than 2^63. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

6.5CVSS6.6AI score0.00806EPSS
SaveExploits1
OSV
OSV
•added 2024/08/06 12:00 a.m.•20 views

OPENSUSE-SU-2024:14240-1 libnbd-1.20.2-1.1 on GA media

These are all security issues fixed in the libnbd-1.20.2-1.1 package on the GA media of openSUSE Tumbleweed...

7.4CVSS7.5AI score0.0039EPSS
SaveExploits0References1
NVD
NVD
•added 2024/08/05 2:15 p.m.•20 views

CVE-2024-7383

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic...

7.4CVSS0.0039EPSS
SaveExploits0References6
OSV
OSV
•added 2024/08/05 2:15 p.m.•5 views

DEBIAN-CVE-2024-7383

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic...

7.4CVSS7.3AI score0.0039EPSS
SaveExploits0References1
OSV
OSV
•added 2024/08/05 2:15 p.m.•12 views

AZL-47436 CVE-2024-7383 affecting package libnbd for versions less than 1.18.3-3

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic...

7.4CVSS7.2AI score0.0039EPSS
SaveExploits0References1
OSV
OSV
•added 2024/08/05 2:15 p.m.•13 views

UBUNTU-CVE-2024-7383

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic...

7.4CVSS7.1AI score0.0039EPSS
SaveExploits0References12
Cvelist
Cvelist
•added 2024/08/05 1:19 p.m.•33 views

CVE-2024-7383 Libnbd: nbd server improper certificate validation

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic...

7.4CVSS0.0039EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2024/08/05 1:19 p.m.•14 views

CVE-2024-7383

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic...

7.4CVSS7.3AI score0.0039EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/08/05 1:19 p.m.•21 views

CVE-2024-7383 Libnbd: nbd server improper certificate validation

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic...

7.4CVSS5.6AI score0.0039EPSS
SaveExploits0References6
CVE
CVE
•added 2024/08/05 1:19 p.m.•104 views

CVE-2024-7383

CVE-2024-7383 affects libnbd (NBD client/server) with improper TLS certificate validation, enabling MITM for NBD traffic. The provided sources confirm the vulnerability in libnbd across multiple Linux distributions (e.g., Red Hat, Rocky Linux, MiracleLinux, Alibaba Cloud Linux, TencentOS Server) ...

7.4CVSS5.5AI score0.0039EPSS
SaveExploits0References6
OSV
OSV
•added 2024/08/05 1:19 p.m.•28 views

CVE-2024-7383 Libnbd: nbd server improper certificate validation

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic...

7.4CVSS7AI score
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/05 12:00 a.m.•1 views

CVE-2024-7383: Improper Certificate Validation

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic...

7.4CVSS7.2AI score0.0039EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/05 12:00 a.m.•6 views

libnbd 信任管理问题漏洞

libnbd is a libguestfs open source library for editing NBD Network Block Device clients. A trust management issue vulnerability exists in libnbd that stems from clients sometimes failing to properly validate the NBD server's certificate when connecting to the NBD server using TLS, allowing...

7.4CVSS7.4AI score0.0039EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2024/08/04 4:15 p.m.•20 views

CVE-2024-7383

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic...

7.4CVSS6.9AI score0.0039EPSS
SaveExploits0References5
CBLMariner
CBLMariner
•added 2024/07/23 2:21 a.m.•25 views

CVE-2021-20286 affecting package libnbd for versions less than 1.18.3-1

CVE-2021-20286 affecting package libnbd for versions less than 1.18.3-1. An upgraded version of the package is available that resolves this issue...

4CVSS6.9AI score0.01136EPSS
SaveExploits0
Rockylinux
Rockylinux
•added 2024/07/15 12:17 p.m.•33 views

virt:rhel and virt-devel:rhel security and bug fix update

An update is available for libnbd, qemu-kvm, module.libvirt-python, module.swtpm, module.supermin, libvirt, module.qemu-kvm, module.sgabios, module.nbdkit, swtpm, libtpms, libguestfs, seabios, sgabios, module.libguestfs-winsupport, module.libguestfs, netcf, module.perl-Sys-Virt, module.virt-v2v,...

6.2CVSS6.9AI score0.00486EPSS
SaveExploits0
Rows per page
Query Builder