Summary
Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients.
Security Fix(es):
* libnbd: NBD server improper certificate validation (CVE-2024-7383)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | libnbd | 1.18.1-4.el9_4 |
| AlmaLinux · 9 | libnbd-bash-completion | 1.18.1-4.el9_4 |
| AlmaLinux · 9 | libnbd-devel | 1.18.1-4.el9_4 |
| AlmaLinux · 9 | nbdfuse | 1.18.1-4.el9_4 |
| AlmaLinux · 9 | ocaml-libnbd | 1.18.1-4.el9_4 |
| AlmaLinux · 9 | ocaml-libnbd-devel | 1.18.1-4.el9_4 |
| AlmaLinux · 9 | python3-libnbd | 1.18.1-4.el9_4 |
Vulnerabilities 1
-
High 7.4
Libnbd: nbd server improper certificate validation
A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.