CVE-2023-5871

A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to cause a Denial of Service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
redhatCNA
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
VendorProductVersion
redhatlibnbd
1.17.4 ≤
𝑥
< 1.18.2
redhatlibnbd
1.19.1
redhatenterprise_linux
9.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libnbd
bullseye
1.6.1-1
not-affected
bookworm
1.14.2-1
not-affected
sid
1.20.3-1
fixed
trixie
1.20.3-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libnbd
oracular
not-affected
noble
needs-triage
mantic
ignored
lunar
ignored
jammy
needs-triage
focal
needs-triage
bionic
ignored
xenial
ignored
trusty
ignored
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2024:2204
https://access.redhat.com/security/cve/CVE-2023-5871
https://bugzilla.redhat.com/show_bug.cgi?id=2247308
https://lists.libguestfs.org/archives/list/guestfs@lists.libguestfs.org/thread/PFVUCMPFQUDC23JXSCUUPXIGDZ7XCFMD/
https://access.redhat.com/errata/RHSA-2024:2204
https://access.redhat.com/security/cve/CVE-2023-5871
https://bugzilla.redhat.com/show_bug.cgi?id=2247308
https://lists.libguestfs.org/archives/list/guestfs@lists.libguestfs.org/thread/PFVUCMPFQUDC23JXSCUUPXIGDZ7XCFMD/