libnbd TLS Verification Vulnerability Allows Man-in-the-Middle Attack
CVE-2024-7383

7.4HIGH

Key Information:

Status
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Red Hat Enterprise Linux 10
Vendor
CVE Published:
5 August 2024

What is CVE-2024-7383?

A security flaw exists in libnbd impacting the verification process of the NBD server's certificate during TLS connections. This weakness can lead to a man-in-the-middle attack, compromising the integrity and confidentiality of the NBD traffic. System administrators and users of affected Red Hat products should take immediate actions to apply the necessary updates to mitigate this vulnerability and secure their environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://access.redhat.com/errata/RHSA-2024:6757
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6964
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-7383
vdb-entryx_refsource_REDHAT

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Jon Szymaniak for reporting this issue.
JSON
.