PT-2023-9291 · Libnbd+5 · Libnbd+5

Pedro Sampaio · Published 2023-09-28 · Updated 2024-08-06 · CVE-2023-5215

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libnbd (affected versions not specified)

Description A flaw was found in libnbd where a server can reply with a block size larger than 2^63, which is a 64-bit unsigned value according to the NBD spec. This issue could lead to an application crash or other unintended behavior for NBD clients that do not treat the return value of the nbd get size() function correctly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unchecked Return Value

Weakness Enumeration

CWE-241

CWE-252

Related Identifiers

ALSA-2024:2204

AZL-31095

AZL-34933

BDU:2024-06033

CVE-2023-5215

INFSA-2024_2204

MGASA-2024-0174

OPENSUSE-SU-2023_4222-1

OPENSUSE-SU-2024:13278-1

RHSA-2024:2204

RHSA-2024_2204

SUSE-SU-2023:4222-1

Affected Products

Almalinux

Debian

Red Hat

Red Os

Suse

Libnbd

References · 40

• 🔥 https://listman.redhat.com/archives/libguestfs/2023-September/032635.html · Exploit
• https://ubuntu.com/security/CVE-2023-5215 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:2204 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-31095 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-5215 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2241041 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2023-5215 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-5215 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-5215 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13278-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-5215 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-34933 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06033 · Security Note
• https://advisories.mageia.org/MGASA-2024-0174.html · Security Note
• https://osv.dev/vulnerability/MGASA-2024-0174 · Vendor Advisory