Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-20286

Опубликовано: 01 мар. 2021
Источник: redhat
CVSS3: 2.7

Описание

A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.

A flaw was found in libnbd. A malicious server may be able to kill a client application using libnbd due to an assertion failure in nbd_unlocked_opt_go() leading to denial of service. The highest threat from this vulnerability is to system availability.

Отчет

Red Hat Enterprise Linux 8 is not affected by this issue. The affected API was introduced in upstream libnbd version 1.4 which is only shipped in RHEL Advanced Virtualization 8.3.0 onward.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 8virt:rhel/libnbdNot affected
Red Hat Enterprise Linux 8 Advanced Virtualizationvirt:8.2/libnbdNot affected
Red Hat Enterprise Linux 8 Advanced Virtualizationvirt:8.3/libnbdFix deferred
Red Hat Enterprise Linux 8 Advanced Virtualizationvirt:av/libnbdAffected
Red Hat Enterprise Linux 9libnbdNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-617
https://bugzilla.redhat.com/show_bug.cgi?id=1934727libnbd: Assertion failure in nbd_unlocked_opt_go in lib/opt.c

2.7 Low

CVSS3

Связанные уязвимости

CVSS3: 2.7
ubuntu
почти 5 лет назад

A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.

CVSS3: 2.7
nvd
почти 5 лет назад

A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.

CVSS3: 2.7
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 2.7
debian
почти 5 лет назад

A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked ...

suse-cvrf
больше 4 лет назад

Security update for kubevirt

2.7 Low

CVSS3