PT-2023-32387 · Libnbd+3 · Libnbd+3

Rich Jones · Publicado 2023-11-16 · Atualizado 2024-07-18 · CVE-2023-5871

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions libnbd (affected versions not specified)

Description A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to cause a Denial of Service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Assertion Failure

Enumeração de Fraquezas

CWE-617

Identificadores relacionados

ALSA-2024:2204

ALT-PU-2023-8404

CVE-2023-5871

INFSA-2024_2204

OPENSUSE-SU-2023_4463-1

OPENSUSE-SU-2024:13422-1

RHSA-2024:2204

RHSA-2024_2204

SUSE-SU-2023:4463-1

Produtos afetados

Almalinux

Red Hat

Suse

Libnbd

Referências · 37

• https://bugzilla.suse.com/1216769 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-5871 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-5871 · Nota de Segurança
• https://bugzilla.redhat.com/2241041 · Nota
• https://access.redhat.com/errata/RHSA-2024:2204 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2023-8404 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5215 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=2247308 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2023-5871 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2023-5871 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2024-06033 · Nota de Segurança
• https://osv.dev/vulnerability/ALSA-2024:2204 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5871 · Nota de Segurança
• https://t.me/cvenotify/63415 · Publicação no Telegram
• https://bugzilla.redhat.com/2247308 · Nota