Red Hat Libnbd vulnerabilities

5 CVEs affecting Red Hat Libnbd, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-5871, published 2023-11-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-14842, published 2019-11-26. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than the beginning of the…
CVE-2021-20286, published 2021-03-15. Low severity, CVSS 2.7. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.
CVE-2022-0485, published 2022-08-29. Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days. A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as…
CVE-2023-5871, published 2023-11-27. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to…
CVE-2023-5215, published 2023-09-28. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-bit unsigned value). This issue could lead to an application crash or other…