Affected: AlmaLinux:9: libnbd, AlmaLinux:9: libnbd-bash-completion, AlmaLinux:9: libnbd-devel, AlmaLinux:9: nbdfuse, AlmaLinux:9: ocaml-libnbd, AlmaLinux:9: ocaml-libnbd-devel, AlmaLinux:9: python3-libnbd

Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients.

Security Fix(es):

* libnbd: NBD server improper certificate validation (CVE-2024-7383)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.

libnbd-1.20.2-1.1 on GA media

QEMU: virtio: DMA reentrancy issue leads to double free vulnerability libnbd: NBD server improper certificate validation QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure

Security update for libnbd

Affected: Ubuntu:20.04:LTS: libnbd, Ubuntu:22.04:LTS: libnbd, Ubuntu:24.04:LTS: libnbd, Ubuntu:25.10: libnbd, Ubuntu:26.04:LTS: libnbd

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.

Ein entfernter anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um eine Man-in-the-middle-Situation zu schaffen.