Improper Certificate Validation in libnbd - CVE-2024-7383

Vulnerability identifier: #VU95607

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-7383

CWE-ID: CWE-295

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform MitM attack.

The vulnerability exist due to improper certificate validation when handling the NBD server's certificate. A remote attacker can perform MitM attack.

libnbd
Oracle Linux
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Anolis OS
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Server Applications Module
openSUSE Leap
Fedora
netcf
netcf-devel
netcf-libs
swtpm-tools-pkcs11
swtpm-tools
swtpm-libs
swtpm-devel
swtpm
libtpms
libtpms-devel
sgabios-bin
sgabios
libvirt-dbus
ruby-hivex
python3-hivex
perl-hivex
ocaml-hivex-devel
ocaml-hivex
hivex-devel
hivex
python3-libnbd
libnbd-bash-completion
nbdfuse
libnbd
libnbd-devel
ocaml-libnbd
ocaml-libnbd-devel
seabios
seabios-bin
seavgabios-bin
libiscsi-devel
libiscsi
libiscsi-utils
libnbd (Red Hat package)
libnbd0-debuginfo
libnbd-debuginfo
libnbd-debugsource
python3-libnbd-debuginfo
nbdfuse-debuginfo
libnbd0
libnbd-devel-debuginfo
nbdkit
nbdkit-tar-filter
nbdkit-ssh-plugin
nbdkit-server
nbdkit-python-plugin
nbdkit-nbd-plugin
nbdkit-linuxdisk-plugin
nbdkit-gzip-plugin
nbdkit-gzip-filter
nbdkit-example-plugins
nbdkit-devel
nbdkit-curl-plugin
nbdkit-basic-plugins
nbdkit-basic-filters
nbdkit-tar-plugin
nbdkit-tmpdisk-plugin
nbdkit-xz-filter
nbdkit-bash-completion
nbdkit-vddk-plugin
virt-v2v-bash-completion
virt-v2v-man-pages-ja
virt-v2v-man-pages-uk
virt-v2v
ocaml-libguestfs
libguestfs-man-pages-ja
libguestfs-man-pages-uk
ocaml-libguestfs-devel
ruby-libguestfs
perl-Sys-Guestfs
libguestfs-javadoc
libguestfs-inspect-icons
libguestfs-bash-completion
python3-libguestfs
libguestfs-tools-c
virt-dib
libguestfs-xfs
libguestfs-gfs2
libguestfs
libguestfs-tools
libguestfs-appliance
libguestfs-devel
libguestfs-gobject
libguestfs-gobject-devel
lua-guestfs
libguestfs-java
libguestfs-java-devel
libguestfs-rescue
libguestfs-rsync
supermin
supermin-devel
qemu-kvm
qemu-kvm-block-gluster
qemu-kvm-hw-usbredir
qemu-kvm-ui-opengl
qemu-kvm-ui-spice
qemu-user-static
qemu-kvm-tests
qemu-guest-agent
qemu-img
qemu-kvm-block-curl
qemu-kvm-block-iscsi
qemu-kvm-block-rbd
qemu-kvm-block-ssh
qemu-kvm-common
qemu-kvm-core
qemu-kvm-docs
perl-Sys-Virt
python3-libvirt
libvirt-wireshark
libvirt-daemon-driver-storage-iscsi
libvirt-daemon-driver-storage-gluster
libvirt-daemon-driver-storage-mpath
libvirt-nss
libvirt-daemon-driver-storage-disk
libvirt-lock-sanlock
libvirt-libs
libvirt-docs
libvirt-devel
libvirt-daemon-driver-storage-iscsi-direct
libvirt-daemon-kvm
libvirt-daemon-driver-storage-scsi
libvirt-daemon-driver-storage-rbd
libvirt-daemon-config-nwfilter
libvirt-daemon-driver-storage-core
libvirt-daemon-driver-storage
libvirt-daemon-driver-secret
libvirt-daemon-driver-qemu
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-nodedev
libvirt-daemon-driver-network
libvirt-daemon-driver-interface
libvirt-daemon-driver-storage-logical
libvirt
libvirt-client
libvirt-daemon
libvirt-daemon-config-network
libguestfs-winsupport
Red Hat OpenShift Container Platform

Install updates from vendor's website.

libnbd - addressed in versions 1.18.5, 1.20.2, 1.21.1
netcf - update to 0.2.8-12.0.1
netcf-devel - update to 0.2.8-12.0.1
netcf-libs - update to 0.2.8-12.0.1
swtpm-tools-pkcs11 - update to 0.7.0-4.20211109gitb79fd91
swtpm-tools - update to 0.7.0-4.20211109gitb79fd91
swtpm-libs - update to 0.7.0-4.20211109gitb79fd91
swtpm-devel - update to 0.7.0-4.20211109gitb79fd91
swtpm - update to 0.7.0-4.20211109gitb79fd91
libtpms - update to 0.9.1-2.20211126git1ff6fe1f43
libtpms-devel - update to 0.9.1-2.20211126git1ff6fe1f43
sgabios-bin - update to 0.20170427git-3
sgabios - update to 0.20170427git-3
libvirt-dbus - update to 1.3.0-2
ruby-hivex - update to 1.3.18-23
python3-hivex - update to 1.3.18-23
perl-hivex - update to 1.3.18-23
ocaml-hivex-devel - update to 1.3.18-23
ocaml-hivex - update to 1.3.18-23
hivex-devel - update to 1.3.18-23
hivex - update to 1.3.18-23
python3-libnbd - addressed in versions 1.6.0-6.0.1, 1.18.5-1
libnbd-bash-completion - addressed in versions 1.6.0-6.0.1, 1.18.5-1
nbdfuse - addressed in versions 1.6.0-6.0.1, 1.18.5-1
libnbd - addressed in versions 1.6.0-6.0.1, 1.18.5-1
libnbd-devel - addressed in versions 1.6.0-6.0.1, 1.18.5-1
ocaml-libnbd - update to 1.6.0-6.0.1
ocaml-libnbd-devel - update to 1.6.0-6.0.1
seabios - update to 1.16.0-4
seabios-bin - update to 1.16.0-4
seavgabios-bin - update to 1.16.0-4
libiscsi-devel - update to 1.18.0-8.0.1
libiscsi - update to 1.18.0-8.0.1
libiscsi-utils - update to 1.18.0-8.0.1
libnbd (Red Hat package) - update to 1.18.1-4.el9_4
libnbd0-debuginfo - addressed in versions 1.18.5-150300.8.21.1, 1.18.5-150600.18.3.1
libnbd-bash-completion - addressed in versions 1.18.5-150300.8.21.1, 1.18.5-150600.18.3.1
libnbd-debuginfo - addressed in versions 1.18.5-150300.8.21.1, 1.18.5-150600.18.3.1
libnbd-debugsource - addressed in versions 1.18.5-150300.8.21.1, 1.18.5-150600.18.3.1
python3-libnbd-debuginfo - addressed in versions 1.18.5-150300.8.21.1, 1.18.5-150600.18.3.1
python3-libnbd - addressed in versions 1.18.5-150300.8.21.1, 1.18.5-150600.18.3.1
nbdfuse - addressed in versions 1.18.5-150300.8.21.1, 1.18.5-150600.18.3.1
libnbd-devel - addressed in versions 1.18.5-150300.8.21.1, 1.18.5-150600.18.3.1
nbdfuse-debuginfo - addressed in versions 1.18.5-150300.8.21.1, 1.18.5-150600.18.3.1
libnbd - addressed in versions 1.18.5-150300.8.21.1, 1.18.5-150600.18.3.1
libnbd0 - addressed in versions 1.18.5-150300.8.21.1, 1.18.5-150600.18.3.1
libnbd-devel-debuginfo - update to 1.18.5-150600.18.3.1
libnbd - addressed in versions 1.22.5-1.fc41, 1.22.5-1.fc42, 1.23.9-1.fc43
nbdkit - update to 1.24.0-5
nbdkit-tar-filter - update to 1.24.0-5
nbdkit-ssh-plugin - update to 1.24.0-5
nbdkit-server - update to 1.24.0-5
nbdkit-python-plugin - update to 1.24.0-5
nbdkit-nbd-plugin - update to 1.24.0-5
nbdkit-linuxdisk-plugin - update to 1.24.0-5
nbdkit-gzip-plugin - update to 1.24.0-5
nbdkit-gzip-filter - update to 1.24.0-5
nbdkit-example-plugins - update to 1.24.0-5
nbdkit-devel - update to 1.24.0-5
nbdkit-curl-plugin - update to 1.24.0-5
nbdkit-basic-plugins - update to 1.24.0-5
nbdkit-basic-filters - update to 1.24.0-5
nbdkit-tar-plugin - update to 1.24.0-5
nbdkit-tmpdisk-plugin - update to 1.24.0-5
nbdkit-xz-filter - update to 1.24.0-5
nbdkit-bash-completion - update to 1.24.0-5
nbdkit-vddk-plugin - update to 1.24.0-5
virt-v2v-bash-completion - update to 1.42.0-22
virt-v2v-man-pages-ja - update to 1.42.0-22
virt-v2v-man-pages-uk - update to 1.42.0-22
virt-v2v - update to 1.42.0-22
ocaml-libguestfs - update to 1.44.0-9.0.1
libguestfs-man-pages-ja - update to 1.44.0-9.0.1
libguestfs-man-pages-uk - update to 1.44.0-9.0.1
ocaml-libguestfs-devel - update to 1.44.0-9.0.1
ruby-libguestfs - update to 1.44.0-9.0.1
perl-Sys-Guestfs - update to 1.44.0-9.0.1
libguestfs-javadoc - update to 1.44.0-9.0.1
libguestfs-inspect-icons - update to 1.44.0-9.0.1
libguestfs-bash-completion - update to 1.44.0-9.0.1
python3-libguestfs - update to 1.44.0-9.0.1
libguestfs-tools-c - update to 1.44.0-9.0.1
virt-dib - update to 1.44.0-9.0.1
libguestfs-xfs - update to 1.44.0-9.0.1
libguestfs-gfs2 - update to 1.44.0-9.0.1
libguestfs - update to 1.44.0-9.0.1
libguestfs-tools - update to 1.44.0-9.0.1
libguestfs-appliance - update to 1.44.0-9.0.1
libguestfs-devel - update to 1.44.0-9.0.1
libguestfs-gobject - update to 1.44.0-9.0.1
libguestfs-gobject-devel - update to 1.44.0-9.0.1
lua-guestfs - update to 1.44.0-9.0.1
libguestfs-java - update to 1.44.0-9.0.1
libguestfs-java-devel - update to 1.44.0-9.0.1
libguestfs-rescue - update to 1.44.0-9.0.1
libguestfs-rsync - update to 1.44.0-9.0.1
Red Hat OpenShift Container Platform - addressed in versions 4.16.15, 4.17.1
supermin - update to 5.2.1-2.0.2
supermin-devel - update to 5.2.1-2.0.2
qemu-kvm - update to 6.2.0-53.0.1
qemu-kvm-block-gluster - update to 6.2.0-53.0.1
qemu-kvm-hw-usbredir - update to 6.2.0-53.0.1
qemu-kvm-ui-opengl - update to 6.2.0-53.0.1
qemu-kvm-ui-spice - update to 6.2.0-53.0.1
qemu-user-static - update to 6.2.0-53.0.1
qemu-kvm-tests - update to 6.2.0-53.0.1
qemu-guest-agent - update to 6.2.0-53.0.1
qemu-img - update to 6.2.0-53.0.1
qemu-kvm-block-curl - update to 6.2.0-53.0.1
qemu-kvm-block-iscsi - update to 6.2.0-53.0.1
qemu-kvm-block-rbd - update to 6.2.0-53.0.1
qemu-kvm-block-ssh - update to 6.2.0-53.0.1
qemu-kvm-common - update to 6.2.0-53.0.1
qemu-kvm-core - update to 6.2.0-53.0.1
qemu-kvm-docs - update to 6.2.0-53.0.1
perl-Sys-Virt - update to 8.0.0-1
python3-libvirt - update to 8.0.0-2
libvirt-wireshark - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-iscsi - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-gluster - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-mpath - update to 8.0.0-23.2.0.2
libvirt-nss - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-disk - update to 8.0.0-23.2.0.2
libvirt-lock-sanlock - update to 8.0.0-23.2.0.2
libvirt-libs - update to 8.0.0-23.2.0.2
libvirt-docs - update to 8.0.0-23.2.0.2
libvirt-devel - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-iscsi-direct - update to 8.0.0-23.2.0.2
libvirt-daemon-kvm - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-scsi - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-rbd - update to 8.0.0-23.2.0.2
libvirt-daemon-config-nwfilter - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-core - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-secret - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-qemu - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-nwfilter - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-nodedev - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-network - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-interface - update to 8.0.0-23.2.0.2
libvirt-daemon-driver-storage-logical - update to 8.0.0-23.2.0.2
libvirt - update to 8.0.0-23.2.0.2
libvirt-client - update to 8.0.0-23.2.0.2
libvirt-daemon - update to 8.0.0-23.2.0.2
libvirt-daemon-config-network - update to 8.0.0-23.2.0.2
libguestfs-winsupport - update to 8.10-1

• https://access.redhat.com/security/cve/CVE-2024-7383
• https://bugzilla.redhat.com/show_bug.cgi?id=2302865
• https://lists.libguestfs.org/archives/list/guestfs@lists.libguestfs.org/message/LHR3BW6RJ7K4BJBQIYV3GTZLSY27VZO2
• https://lists.libguestfs.org/archives/list/guestfs@lists.libguestfs.org/thread/ENZY4LHLARA3N4C3JUNLPYUCXHFO7BWQ/

• MitM attack in libnbd
• SUSE update for libnbd
• SUSE update for libnbd
• Red Hat Enterprise Linux 9 update for libnbd
• Red Hat Enterprise Linux 8 update for the virt:rhel and virt-devel:rhel module
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Anolis OS update for virt:an module
• Anolis OS update for libnbd
• Fedora 42 update for libnbd
• Fedora 41 update for libnbd
• Fedora 43 update for libnbd