CVE-2023-5215
Fixed in a distro release EPSS <1%CVSS 5.3
A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-bit unsigned value). This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the return value of the nbd_get_size() function correctly.
Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8 Advanced Virtualization
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | libnbd | 1.18.1-3.el9 |
| AlmaLinux 9 | libnbd-bash-completion | 1.18.1-3.el9 |
| AlmaLinux 9 | libnbd-devel | 1.18.1-3.el9 |
| AlmaLinux 9 | nbdfuse | 1.18.1-3.el9 |
| AlmaLinux 9 | ocaml-libnbd | 1.18.1-3.el9 |
| AlmaLinux 9 | ocaml-libnbd-devel | 1.18.1-3.el9 |
| AlmaLinux 9 | python3-libnbd | 1.18.1-3.el9 |
| Debian 12 | libnbd | no fix |
| Debian 13 | libnbd | 1.16.5-1 |
| Debian 14 | libnbd | 1.16.5-1 |
| Red Hat Enterprise Linux 9 | libnbd | 0:1.18.1-3.el9 |
| Red Hat Enterprise Linux 9 | libnbd-bash-completion | 0:1.18.1-3.el9 |
| Red Hat Enterprise Linux 9 | libnbd-debuginfo | 0:1.18.1-3.el9 |
| Red Hat Enterprise Linux 9 | libnbd-debugsource | 0:1.18.1-3.el9 |
| Red Hat Enterprise Linux 9 | libnbd-devel | 0:1.18.1-3.el9 |
| Red Hat Enterprise Linux 9 | nbdfuse | 0:1.18.1-3.el9 |
| Red Hat Enterprise Linux 9 | nbdfuse-debuginfo | 0:1.18.1-3.el9 |
| Red Hat Enterprise Linux 9 | ocaml-libnbd | 0:1.18.1-3.el9 |
| Red Hat Enterprise Linux 9 | ocaml-libnbd-debuginfo | 0:1.18.1-3.el9 |
| Red Hat Enterprise Linux 9 | ocaml-libnbd-devel | 0:1.18.1-3.el9 |
| Red Hat Enterprise Linux 9 | python3-libnbd | 0:1.18.1-3.el9 |
| Red Hat Enterprise Linux 9 | python3-libnbd-debuginfo | 0:1.18.1-3.el9 |
| Ubuntu 20.04 LTS | libnbd | no fix |
| Ubuntu 22.04 LTS | libnbd | no fix |
| Ubuntu 24.04 LTS | libnbd | no fix |
| Ubuntu 25.10 | libnbd | no fix |
| Ubuntu 26.04 LTS | libnbd | no fix |
| Ubuntu 26.10 | libnbd | no fix |
| openSUSE Leap 15.4 | libnbd | 1.18.1-150300.8.15.1 |
| openSUSE Leap 15.5 | libnbd | 1.18.1-150300.8.15.1 |
| openSUSE Tumbleweed | libnbd | 1.18.0-1.1 |