Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-5215

Libnbd: crash or misbehaviour when nbd server returns an unexpected block size

Description

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-bit unsigned value). This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the return value of the nbd_get_size() function correctly.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:1.18.1-3.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

Red Hat Red Hat Enterprise Linux 8 Advanced Virtualization

Default version status: affected

Red Hat Red Hat Enterprise Linux 8 Advanced Virtualization

Default version status: affected

References