Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:44209
HistoryNov 09, 2023 - 9:15 a.m.

Denial Of Service

2023-11-0909:15:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
vulnerability
nbd protocol
flag values
server
reply
software

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

JSON

libnbd is vulnerable to Denial of Service (DoS). The vulnerability is due to a flaw in the handling of 64-bit extended headers in the NBD protocol when dealing with large flag values in the server’s reply to the NBD_CMD_BLOCK_STATUS command.

CPENameOperatorVersion
libnbd.soeq0.0.0
libnbd.soeq0.0.0

Related

openvas 2
redhatcve 1
nessus 4
fedora 1
ubuntucve 1
cve 1
debiancve 1
prion 1
cvelist 1
nvd 1
oraclelinux 1
redhat 1
osv 1
almalinux 1
openvas
openvas
Fedora: Security Advisory for libnbd (FEDORA-2023-00c130636a)
2023-11-09 00:00:00
openSUSE: Security Advisory for libnbd (SUSE-SU-2023:4463-1)
2024-03-04 00:00:00
redhatcve
redhatcve
CVE-2023-5871
2023-11-01 01:42:58
nessus
nessus
Fedora 39 : libnbd (2023-00c130636a)
2023-11-09 00:00:00
openSUSE 15 Security Update : libnbd (SUSE-SU-2023:4463-1)
2023-11-17 00:00:00
RHEL 9 : libnbd (RHSA-2024:2204)
2024-04-30 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: libnbd-1.18.1-2.fc39
2023-11-09 01:22:30
ubuntucve
ubuntucve
CVE-2023-5871
2023-11-27 00:00:00
cve
cve
CVE-2023-5871
2023-11-27 12:15:07
debiancve
debiancve
CVE-2023-5871
2023-11-27 12:15:07
prion
prion
Hardcoded credentials
2023-11-27 12:15:00
cvelist
cvelist
CVE-2023-5871 Libnbd: malicious nbd server may crash libnbd
2023-11-27 11:58:44
nvd
nvd
CVE-2023-5871
2023-11-27 12:15:07
oraclelinux
oraclelinux
libnbd security update
2024-05-02 00:00:00
redhat
redhat
(RHSA-2024:2204) Moderate: libnbd security update
2024-04-30 06:15:02
osv
osv
Moderate: libnbd security update
2024-04-30 00:00:00
almalinux
almalinux
Moderate: libnbd security update
2024-04-30 00:00:00

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

JSON
Related for VERACODE:44209
openvas2redhatcve1nessus4fedora1ubuntucve1cve1debiancve1prion1cvelist1nvd1oraclelinux1redhat1osv1almalinux1