virt:av/libnbd vulnerabilities

CVEs whose affected-version data names the virt:av/libnbd package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-7383High· 7.4

2y ago

Libnbd: nbd server improper certificate validation

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.

▾ TwilightRed Hat · libnbdEPSS 0.39%via CVEORG