Redhat

Libnbd

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2023-5871

  • EPSS 0.1%
  • Veröffentlicht 27.11.2023 12:15:07
  • Zuletzt bearbeitet 21.11.2024 08:42:40

A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to cause a Denial of Service.

6.5

CVE-2023-5215

Exploit
  • EPSS 0.07%
  • Veröffentlicht 28.09.2023 14:15:26
  • Zuletzt bearbeitet 21.11.2024 08:41:18

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-bit unsigned value). This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat...

4.8

CVE-2022-0485

Exploit
  • EPSS 0.13%
  • Veröffentlicht 29.08.2022 15:15:09
  • Zuletzt bearbeitet 21.11.2024 06:38:45

A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as successful, rather than checking the *error parame...

4

CVE-2021-20286

  • EPSS 0.13%
  • Veröffentlicht 15.03.2021 18:15:17
  • Zuletzt bearbeitet 21.11.2024 05:46:17

A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.

9.8

CVE-2019-14842

  • EPSS 0.38%
  • Veröffentlicht 26.11.2019 16:15:11
  • Zuletzt bearbeitet 21.11.2024 04:27:28

Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than the beginning of the request did not work because of signed/unsigned co...