CVE-2024-7383
High · 7.4CVSS
7.4
EPSS
0.4%
Published
Aug 5, 2024
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A storage connection library did not properly check the identity of the remote server, allowing someone in the middle to secretly read or change the data being transferred.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- Moderate
- Impact
- Data Tampering
- Component
- Library
- Class
- Cryptographic Weakness
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
The libnbd client fails to properly validate the NBD server's TLS certificate during connection establishment, enabling undetected interception and modification of network block device traffic.
Why it matters to the business
Organizations using NBD over TLS for remote storage access face risk of data exposure or tampering on the wire, potentially affecting confidentiality of disk images and operational integrity of storage-dependent workloads; low exploitability reduces immediate urgency but still requires patching.
How an attack unfolds
An attacker on the network path between NBD client and server performs a man-in-the-middle attack by supplying a forged certificate that the client does not reject, allowing decryption, inspection, or alteration of all subsequent NBD protocol commands and data blocks.
How to fix it
Update libnbd to a version that enforces proper server certificate verification when TLS is enabled; recompile or reinstall dependent applications after the library update and verify TLS configuration uses certificate pinning or trusted CA validation where possible.
How to confirm the fix worked
Confirm the installed libnbd version contains the certificate verification fix, then test connections with a deliberately invalid server certificate to ensure the client now rejects it; review build logs and package manifests for the corrected library.
Typical attack path
- Position network access between NBD client and server
- Intercept the TLS handshake and present a crafted certificate
- Exploit missing certificate validation to complete the session
- Decrypt and read or modify NBD traffic including block reads and writes
How to detect it
Review application and system logs for NBD connection attempts that complete without certificate errors; inspect network captures for TLS sessions to NBD ports that use unexpected or self-signed certificates; correlate with process execution of nbd-client or related tools.
What your security team should do
- Prioritize patching libnbd in all environments using NBD over TLS within standard change windows
- Audit NBD client configurations to enforce certificate validation and trusted CAs
- Monitor network flows for unexpected NBD traffic patterns or certificate anomalies
The record
A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | SLOF | 0 | 20210217-2.module_el8.10.0+3768+dfd76e10 |
| AlmaLinux:8 | hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | hivex-devel | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | hivex-devel | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-appliance | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-bash-completion | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-gfs2 | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-gobject | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-gobject-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-inspect-icons | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-java | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-java-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-javadoc | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-man-pages-ja | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-man-pages-uk | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-rescue | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-rsync | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-tools | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-tools-c | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-winsupport | 0 | 8.10-1.module_el8.10.0+3768+dfd76e10 |
| AlmaLinux:8 | libguestfs-xfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libiscsi | 0 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libiscsi | 0 | 1.18.0-8.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libiscsi-devel | 0 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libiscsi-devel | 0 | 1.18.0-8.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libiscsi-utils | 0 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libiscsi-utils | 0 | 1.18.0-8.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libnbd | 0 | 1.6.0-6.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | libnbd-bash-completion | 0 | 1.6.0-6.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | libnbd-devel | 0 | 1.6.0-6.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | libtpms | 0 | 0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | libtpms-devel | 0 | 0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | libvirt | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-client | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-client | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-config-network | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-config-network | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-config-nwfilter | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-interface | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-interface | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-network | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-nodedev | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-nodedev | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-nwfilter | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-nwfilter | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-qemu | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-qemu | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-secret | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-secret | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-core | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-core | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-disk | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-disk | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-gluster | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi-direct | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi-direct | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-logical | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-logical | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-mpath | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-mpath | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-rbd | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-rbd | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-scsi | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-scsi | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-kvm | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-kvm | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-dbus | 0 | 1.3.0-2.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libvirt-dbus | 0 | 1.3.0-2.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libvirt-devel | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-devel | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-docs | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-docs | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-libs | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-libs | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-lock-sanlock | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-lock-sanlock | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-nss | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-nss | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-wireshark | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-wireshark | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | lua-guestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | nbdfuse | 0 | 1.6.0-6.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | nbdkit | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-bash-completion | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-basic-filters | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-basic-plugins | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-curl-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-devel | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-example-plugins | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-gzip-filter | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-gzip-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-linuxdisk-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-nbd-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-python-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-server | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-ssh-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-tar-filter | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-tar-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-tmpdisk-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-vddk-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-xz-filter | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | netcf | 0 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | netcf | 0 | 0.2.8-12.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | netcf-devel | 0 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | netcf-devel | 0 | 0.2.8-12.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | netcf-libs | 0 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | netcf-libs | 0 | 0.2.8-12.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ocaml-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ocaml-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ocaml-hivex-devel | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ocaml-hivex-devel | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ocaml-libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | ocaml-libguestfs-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | ocaml-libnbd | 0 | 1.6.0-6.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | ocaml-libnbd-devel | 0 | 1.6.0-6.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | perl-Sys-Guestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | perl-Sys-Virt | 0 | 8.0.0-1.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | perl-Sys-Virt | 0 | 8.0.0-1.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | perl-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | perl-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | python3-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | python3-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | python3-libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | python3-libnbd | 0 | 1.6.0-6.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | python3-libvirt | 0 | 8.0.0-2.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | qemu-guest-agent | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-img | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-block-curl | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-block-gluster | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-block-iscsi | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-block-rbd | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-block-ssh | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-common | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-core | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-docs | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-hw-usbredir | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-tests | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-ui-opengl | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-ui-spice | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | ruby-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ruby-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ruby-libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | seabios | 0 | 1.16.0-4.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | seabios-bin | 0 | 1.16.0-4.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | seavgabios-bin | 0 | 1.16.0-4.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | sgabios | 0 | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | sgabios-bin | 0 | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | supermin | 0 | 5.2.1-2.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | supermin-devel | 0 | 5.2.1-2.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-devel | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-libs | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-tools | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-tools-pkcs11 | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | virt-dib | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | virt-v2v | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | virt-v2v-bash-completion | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | virt-v2v-man-pages-ja | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | virt-v2v-man-pages-uk | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:9 | libnbd | 0 | 1.18.1-4.el9_4 |
| AlmaLinux:9 | libnbd-bash-completion | 0 | 1.18.1-4.el9_4 |
| AlmaLinux:9 | libnbd-devel | 0 | 1.18.1-4.el9_4 |
| AlmaLinux:9 | nbdfuse | 0 | 1.18.1-4.el9_4 |
| AlmaLinux:9 | ocaml-libnbd | 0 | 1.18.1-4.el9_4 |
| AlmaLinux:9 | ocaml-libnbd-devel | 0 | 1.18.1-4.el9_4 |
| AlmaLinux:9 | python3-libnbd | 0 | 1.18.1-4.el9_4 |
| Debian:11 | libnbd | 0 | No fix |
| Debian:12 | libnbd | 0 | No fix |
| Debian:13 | libnbd | 0 | 1.20.2-1 |
| Red Hat:enterprise_linux:8::appstream | SLOF | 0 | 0:20210217-2.module+el8.10.0+20141+6faa2812 |
| Red Hat:enterprise_linux:8::appstream | hivex | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | hivex-debuginfo | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | hivex-debugsource | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | hivex-devel | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-appliance | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-bash-completion | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-debuginfo | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-debugsource | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-devel | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gfs2 | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gobject | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gobject-debuginfo | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gobject-devel | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-inspect-icons | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-java | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-java-debuginfo | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-java-devel | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-javadoc | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-man-pages-ja | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
Related vulnerabilities
- CVE-2024-7409 A flaw was found in the QEMU NBD Server. Also affects SLOF
- CVE-2024-4467 A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. Also affects SLOF
- CVE-2024-4418 A race condition leading to a stack use-after-free flaw was found in libvirt. Also affects SLOF
- CVE-2024-3446 A double free vulnerability was found in QEMU virtio devices (virtio-gpu… Also affects SLOF
- CVE-2023-1018 An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte… Also affects SLOF
- CVE-2019-11135 TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow… Also affects libiscsi
- CVE-2023-5871 A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for… Also affects libnbd
- CVE-2024-2494 A flaw was found in the RPC library APIs of libvirt. Also affects SLOF