CVE-2021-20286

A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.7 LOW
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
Affected Products (NVD)
VendorProductVersion
redhatlibnbd
𝑥
< 1.7.3
redhatenterprise_linux
8.3.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libnbd
bookworm
1.14.2-1
fixed
bullseye
no-dsa
sid
1.20.3-1
fixed
trixie
1.20.3-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libnbd
bionic
dne
focal
needs-triage
groovy
ignored
hirsute
not-affected
impish
not-affected
jammy
not-affected
kinetic
not-affected
lunar
not-affected
mantic
not-affected
noble
not-affected
trusty
dne
xenial
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
containerized-data-importer-manifests
suse enterprise sap 15 SP2
1.30.0-5.3.2
fixed
suse enterprise server 15 SP2
1.30.0-5.3.2
fixed
kubevirt-manifests
suse enterprise sap 15 SP2
0.40.0-5.11.2
fixed
suse enterprise sap 15 SP3
0.40.0-5.11.2
fixed
suse enterprise server 15 SP2
0.40.0-5.11.2
fixed
suse enterprise server 15 SP3
0.40.0-5.11.2
fixed
kubevirt-virtctl
suse enterprise sap 15 SP2
0.40.0-5.11.2
fixed
suse enterprise sap 15 SP3
0.40.0-5.11.2
fixed
suse enterprise server 15 SP2
0.40.0-5.11.2
fixed
suse enterprise server 15 SP3
0.40.0-5.11.2
fixed
libnbd
suse enterprise sap 15 SP7
1.20.3-150700.1.8
fixed
suse enterprise server 15 SP7
1.20.3-150700.1.8
fixed
libnbd0
suse enterprise sap 15 SP7
1.20.3-150700.1.8
fixed
suse enterprise server 15 SP7
1.20.3-150700.1.8
fixed
nbdfuse
suse enterprise sap 15 SP7
1.20.3-150700.1.8
fixed
suse enterprise server 15 SP7
1.20.3-150700.1.8
fixed