Unchecked Return Value in libnbd - CVE-2023-5215

Vulnerability identifier: #VU82550

CSH Severity: Medium

CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-5215

CWE-ID: CWE-252

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation when handling server responses in NBD client. A remote server can return a block size larger than 2^63 and crash the client.

libnbd
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
openSUSE Leap
Fedora
libnbd (Red Hat package)
libnbd-debuginfo
libnbd0
libnbd-debugsource
libnbd-devel
python3-libnbd-debuginfo
python3-libnbd
nbdfuse
nbdfuse-debuginfo
libnbd
libnbd0-debuginfo
libnbd-bash-completion
Red Hat OpenShift Container Platform

Install updates from vendor's website.

libnbd - update to 1.18.0
libnbd (Red Hat package) - update to 1.18.1-3.el9
libnbd-debuginfo - update to 1.18.1-150300.8.15.1
libnbd0 - update to 1.18.1-150300.8.15.1
libnbd-debugsource - update to 1.18.1-150300.8.15.1
libnbd-devel - update to 1.18.1-150300.8.15.1
python3-libnbd-debuginfo - update to 1.18.1-150300.8.15.1
python3-libnbd - update to 1.18.1-150300.8.15.1
nbdfuse - update to 1.18.1-150300.8.15.1
nbdfuse-debuginfo - update to 1.18.1-150300.8.15.1
libnbd - update to 1.18.1-150300.8.15.1
libnbd0-debuginfo - update to 1.18.1-150300.8.15.1
libnbd-bash-completion - update to 1.18.1-150300.8.15.1
libnbd - addressed in versions 1.22.5-1.fc41, 1.22.5-1.fc42, 1.23.9-1.fc43
Red Hat OpenShift Container Platform - update to 4.17.0

• https://access.redhat.com/security/cve/CVE-2023-5215
• https://bugzilla.redhat.com/show_bug.cgi?id=2241041
• https://listman.redhat.com/archives/libguestfs/2023-September/032635.html

• Denial of service in libnbd
• SUSE update for libnbd
• Red Hat Enterprise Linux 9 update for libnbd
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Fedora 42 update for libnbd
• Fedora 41 update for libnbd
• Fedora 43 update for libnbd