Threats Tagged 'cve-2024-7383'

This Red Hat security advisory addresses multiple vulnerabilities in the virt:rhel and virt-devel:rhel modules used for Kernel-based Virtual Machine (KVM) virtualization on Red Hat Enterprise Linux 8. The issues include a double free vulnerability in QEMU's virtio DMA handling (CVE-2024-3446), a denial of service caused by improper synchronization in the QEMU NBD server during socket closure (CVE-2024-7409), and improper certificate validation in the libnbd NBD server (CVE-2024-7383). These vulnerabilities have been rated with moderate severity by Red Hat. Updates are available to remediate these issues for various Red Hat Enterprise Linux 8 architectures and related modules. No known exploits in the wild have been reported at this time.

Network Block Device (NBD) is a protocol for accessing Block Devices (hard disks and disk-like devices) over a Network. The libnbd is a userspace client library for writing NBD clients. Security Fix(es): * libnbd: NBD server improper certificate validation (CVE-2024-7383) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.