PT-2023-32387 · Libnbd+3 · Libnbd+3

Rich Jones · Published 2023-11-16 · Updated 2024-07-18 · CVE-2023-5871

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions libnbd (affected versions not specified)

Description A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to cause a Denial of Service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

ALSA-2024:2204

ALT-PU-2023-8404

CVE-2023-5871

INFSA-2024_2204

OPENSUSE-SU-2023_4463-1

OPENSUSE-SU-2024:13422-1

RHSA-2024:2204

RHSA-2024_2204

SUSE-SU-2023:4463-1

Affected Products

Almalinux

Red Hat

Suse

Libnbd

References · 37

• https://osv.dev/vulnerability/UBUNTU-CVE-2023-5871 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-5871 · Security Note
• https://access.redhat.com/errata/RHSA-2024:2204 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2023-8404 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5215 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2247308 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2023-5871 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-5871 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06033 · Security Note
• https://osv.dev/vulnerability/ALSA-2024:2204 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5871 · Security Note
• https://errata.almalinux.org/9/ALSA-2024-2204.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13422-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-5871 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-5871 · Vendor Advisory