CVE-2023-5871

CWE-617 — Reachable AssertionCWE-400 — Uncontrolled Resource ConsumptionCWE-6717 documents6 sources
Severity
5.3MEDIUM
EPSS
0.0%
top 88.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Redhat LibnbdRedhat Enterprise Linux
Timeline
PublishedNov 27

Description

A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to cause a Denial of Service.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶NVDredhat/libnbd1.17.4 — 1.18.2+1
▶Debianlibnbd< 1.18.1-1+1

Also affects: Enterprise Linux 9.0

Patches

Patch: lists.libguestfs.org ↗Patch: lists.libguestfs.org ↗

🔴Vulnerability Details

4
CVEList
Libnbd: malicious nbd server may crash libnbd↗2023-11-27
▶
GHSA
GHSA-m8ch-v4g3-cq3g: A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network↗2023-11-27
▶
OSV
CVE-2023-5871: A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network↗2023-11-27
▶
OSV
git regression↗2023-03-02
▶

📋Vendor Advisories

2
Red Hat
libnbd: Malicious NBD server may crash libnbd↗2023-10-31
▶
Debian
CVE-2023-5871: libnbd - A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a pro...↗2023
▶
CVE-2023-5871 (MEDIUM CVSS 5.3) | A flaw was found in libnbd | cvebase.io