Описание
A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.
A flaw was found in libnbd. A malicious server may be able to kill a client application using libnbd due to an assertion failure in nbd_unlocked_opt_go() leading to denial of service. The highest threat from this vulnerability is to system availability.
Отчет
Red Hat Enterprise Linux 8 is not affected by this issue. The affected API was introduced in upstream libnbd version 1.4 which is only shipped in RHEL Advanced Virtualization 8.3.0 onward.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 8 | virt:rhel/libnbd | Not affected | ||
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt:8.2/libnbd | Not affected | ||
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt:8.3/libnbd | Fix deferred | ||
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt:av/libnbd | Affected | ||
| Red Hat Enterprise Linux 9 | libnbd | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
2.7 Low
CVSS3
Связанные уязвимости
A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.
A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.
A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked ...
EPSS
2.7 Low
CVSS3