PT-2013-1067 · Debian+2 · Nbd+2

Wouter Verhelst · Publicado 2013-12-07 · Atualizado 2024-11-15 · CVE-2013-6410

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions nbd versions prior to 3.5

Description The issue concerns multiple vulnerabilities in the nbd package of the Debian GNU/Linux operating system, which can be exploited to compromise the confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.

Recommendations For versions prior to 3.5, update to version 3.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the nbd-server to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2020-3164

ALT-PU-2020-3187

ALT-PU-2024-15569

BDU:2015-01947

CVE-2013-6410

DSA-2806-1

USN-2676-1

Produtos afetados

Alt Linux

Ubuntu

Nbd

Referências · 32

• http://sourceforge.net/mailarchive/forum.php?thread_name=529BAA58.2080401%40uter.be&forum_name=nbd-general · Correção
• http://ubuntu.com/usn/USN-2676-1 · Aviso do Fabricante
• http://seclists.org/oss-sec/2013/q4/366 · Nota
• https://errata.altlinux.org/ALT-PU-2020-3187 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2013-6410 · Aviso do Fabricante
• http://debian.org/security/dsa-2806 · Nota
• https://errata.altlinux.org/ALT-PU-2024-15569 · Aviso do Fabricante
• https://safe-surf.ru/specialists/bulletins-nkcki/677212 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26496 · Nota de Segurança
• https://lists.debian.org/nbd/2022/01/msg00037.html · Nota
• https://bdu.fstec.ru/vul/2015-01947 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7441 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2013-6410 · Nota de Segurança
• https://bdu.fstec.ru/vul/2022-01639 · Nota de Segurança
• http://openwall.com/lists/oss-security/2013/11/29/4 · Nota