<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 08:46:54 +0000</lastBuildDate>
    <item>
      <title>ALSA-2024:6757 — Moderate: libnbd security update</title>
      <link>https://cve.radiocsirt.org/vuln/alsa-2024:6757</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:9: libnbd, AlmaLinux:9: libnbd-bash-completion, AlmaLinux:9: libnbd-devel, AlmaLinux:9: nbdfuse, AlmaLinux:9: ocaml-libnbd, AlmaLinux:9: ocaml-libnbd-devel, AlmaLinux:9: python3-libnbd&lt;/p&gt;
&lt;p&gt;Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* libnbd: NBD server improper certificate validation (CVE-2024-7383)&lt;/p&gt;
&lt;p&gt;For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:9: libnbd, AlmaLinux:9: libnbd-bash-completion, AlmaLinux:9: libnbd-devel, AlmaLinux:9: nbdfuse, AlmaLinux:9: ocaml-libnbd, AlmaLinux:9: ocaml-libnbd-devel, AlmaLinux:9: python3-libnbd&lt;/p&gt;
&lt;p&gt;Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* libnbd: NBD server improper certificate validation (CVE-2024-7383)&lt;/p&gt;
&lt;p&gt;For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/alsa-2024:6757</guid>
    </item>
    <item>
      <title>bdu:2024-07439</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2024-07439</link>
      <description>bdu:2024-07439</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2024-07439</guid>
    </item>
    <item>
      <title>EUVD-2026-270740</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-270740</link>
      <description>EUVD-2026-270740</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-270740</guid>
    </item>
    <item>
      <title>fkie_cve-2024-7383</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2024-7383</link>
      <description>&lt;p&gt;A flaw was found in libnbd. The client did not always correctly verify the NBD server&amp;#39;s certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A flaw was found in libnbd. The client did not always correctly verify the NBD server&amp;#39;s certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2024-7383</guid>
    </item>
    <item>
      <title>GHSA-rqmr-f8r9-69wq</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-rqmr-f8r9-69wq</link>
      <description>&lt;p&gt;A flaw was found in libnbd. The client did not always correctly verify the NBD server&amp;#39;s certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A flaw was found in libnbd. The client did not always correctly verify the NBD server&amp;#39;s certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-rqmr-f8r9-69wq</guid>
    </item>
    <item>
      <title>msrc_CVE-2024-7383 — Libnbd: nbd server improper certificate validation</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2024-7383</link>
      <description>msrc_CVE-2024-7383</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2024-7383</guid>
    </item>
    <item>
      <title>openSUSE-SU-2024:14240-1 — libnbd-1.20.2-1.1 on GA media</title>
      <link>https://cve.radiocsirt.org/vuln/opensuse-su-2024:14240-1</link>
      <description>&lt;p&gt;libnbd-1.20.2-1.1 on GA media&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;libnbd-1.20.2-1.1 on GA media&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/opensuse-su-2024:14240-1</guid>
    </item>
    <item>
      <title>RHSA-2024:6964 — Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update</title>
      <link>https://cve.radiocsirt.org/vuln/rhsa-2024:6964</link>
      <description>&lt;p&gt;QEMU: virtio: DMA reentrancy issue leads to double free vulnerability libnbd: NBD server improper certificate validation QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;QEMU: virtio: DMA reentrancy issue leads to double free vulnerability libnbd: NBD server improper certificate validation QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/rhsa-2024:6964</guid>
    </item>
    <item>
      <title>SUSE-SU-2024:2789-1 — Security update for libnbd</title>
      <link>https://cve.radiocsirt.org/vuln/suse-su-2024:2789-1</link>
      <description>&lt;p&gt;Security update for libnbd&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for libnbd&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/suse-su-2024:2789-1</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2024-7383</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-7383</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:20.04:LTS: libnbd, Ubuntu:22.04:LTS: libnbd, Ubuntu:24.04:LTS: libnbd, Ubuntu:25.10: libnbd, Ubuntu:26.04:LTS: libnbd&lt;/p&gt;
&lt;p&gt;A flaw was found in libnbd. The client did not always correctly verify the NBD server&amp;#39;s certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:20.04:LTS: libnbd, Ubuntu:22.04:LTS: libnbd, Ubuntu:24.04:LTS: libnbd, Ubuntu:25.10: libnbd, Ubuntu:26.04:LTS: libnbd&lt;/p&gt;
&lt;p&gt;A flaw was found in libnbd. The client did not always correctly verify the NBD server&amp;#39;s certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-7383</guid>
    </item>
    <item>
      <title>WID-SEC-W-2024-2179 — Red Hat Enterprise Linux (libnbd): Schwachstelle ermöglicht Man-in-the-middle-Bedingung</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2179</link>
      <description>&lt;p&gt;Ein entfernter anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um eine Man-in-the-middle-Situation zu schaffen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein entfernter anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um eine Man-in-the-middle-Situation zu schaffen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2179</guid>
    </item>
  </channel>
</rss>
