Red Hat Security Advisory

RHSA-2024:2204

libnbd security update

Released 2024-04-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) libnbd-1.18.1-3.el9, libnbd-bash-completion-1.18.1-3.el9, nbdfuse-1.18.1-3.el9 +1
Red Hat Enterprise Linux CRB (v. 9) libnbd-devel-1.18.1-3.el9, ocaml-libnbd-1.18.1-3.el9, ocaml-libnbd-devel-1.18.1-3.el9

TI-2023-04798 CVE-2023-5215 · GHSA-fj2q-5f6j-5xf4

LOW 30

A flaw was found in libnbd.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00806 Published 2023-09-28 Partial fix · 1.18.1-3.el9 CWE-241

TI-2023-05406 CVE-2023-5871 · GHSA-m8ch-v4g3-cq3g

LOW 26

A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01108 Published 2023-11-27 Fixed in 1.18.1-3.el9 CWE-617