Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2023-5215

Опубликовано: 21 сент. 2023
Источник: redhat
CVSS3: 5.3

Описание

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-bit unsigned value). This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the return value of the nbd_get_size() function correctly.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 8virt:rhel/libnbdFix deferred
Red Hat Enterprise Linux 8 Advanced Virtualizationvirt:av/libnbdFix deferred
Red Hat Enterprise Linux 8 Advanced Virtualizationvirt-devel:av/libnbdFix deferred
Red Hat Enterprise Linux 9libnbdFixedRHSA-2024:220430.04.2024

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-241
https://bugzilla.redhat.com/show_bug.cgi?id=2241041libnbd: Crash or misbehaviour when NBD server returns an unexpected block size

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 2 года назад

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-bit unsigned value). This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the return value of the nbd_get_size() function correctly.

CVSS3: 5.3
nvd
почти 2 года назад

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-bit unsigned value). This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the return value of the nbd_get_size() function correctly.

CVSS3: 6.5
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 5.3
debian
почти 2 года назад

A flaw was found in libnbd. A server can reply with a block size large ...

suse-cvrf
больше 1 года назад

Security update for libnbd

5.3 Medium

CVSS3