A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.
References
| Link | Resource |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1994695 | Issue Tracking Patch Third Party Advisory |
| https://gitlab.com/nbdkit/nbdkit/-/commit/09a13dafb7bb3a38ab52eb5501cba786365ba7fd | Patch Third Party Advisory |
| https://gitlab.com/nbdkit/nbdkit/-/commit/6c5faac6a37077cf2366388a80862bb00616d0d8 | Patch Third Party Advisory |
| https://listman.redhat.com/archives/libguestfs/2021-August/msg00083.html | Broken Link |
| https://www.openwall.com/lists/oss-security/2021/08/18/2 | Mailing List Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1994695 | Issue Tracking Patch Third Party Advisory |
| https://gitlab.com/nbdkit/nbdkit/-/commit/09a13dafb7bb3a38ab52eb5501cba786365ba7fd | Patch Third Party Advisory |
| https://gitlab.com/nbdkit/nbdkit/-/commit/6c5faac6a37077cf2366388a80862bb00616d0d8 | Patch Third Party Advisory |
| https://listman.redhat.com/archives/libguestfs/2021-August/msg00083.html | Broken Link |
| https://www.openwall.com/lists/oss-security/2021/08/18/2 | Mailing List Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 06:22
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=1994695 - Issue Tracking, Patch, Third Party Advisory | |
| References | () https://gitlab.com/nbdkit/nbdkit/-/commit/09a13dafb7bb3a38ab52eb5501cba786365ba7fd - Patch, Third Party Advisory | |
| References | () https://gitlab.com/nbdkit/nbdkit/-/commit/6c5faac6a37077cf2366388a80862bb00616d0d8 - Patch, Third Party Advisory | |
| References | () https://listman.redhat.com/archives/libguestfs/2021-August/msg00083.html - Broken Link | |
| References | () https://www.openwall.com/lists/oss-security/2021/08/18/2 - Mailing List, Third Party Advisory |
07 Jul 2023, 19:27
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-Other |
09 Mar 2022, 19:34
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://listman.redhat.com/archives/libguestfs/2021-August/msg00083.html - Broken Link | |
| References | (MISC) https://www.openwall.com/lists/oss-security/2021/08/18/2 - Mailing List, Third Party Advisory | |
| References | (MISC) https://gitlab.com/nbdkit/nbdkit/-/commit/6c5faac6a37077cf2366388a80862bb00616d0d8 - Patch, Third Party Advisory | |
| References | (MISC) https://gitlab.com/nbdkit/nbdkit/-/commit/09a13dafb7bb3a38ab52eb5501cba786365ba7fd - Patch, Third Party Advisory | |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1994695 - Issue Tracking, Patch, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 3.1 |
| CPE | cpe:2.3:a:nbdkit_project:nbdkit:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:* |
|
| CWE | CWE-924 |
02 Mar 2022, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-03-02 23:15
Updated : 2024-11-21 06:22
NVD link : CVE-2021-3716
Mitre link : CVE-2021-3716
CVE.ORG link : CVE-2021-3716
JSON object : View
Products Affected
nbdkit_project
- nbdkit
redhat
- enterprise_linux
CWE
CWE-924
Improper Enforcement of Message Integrity During Transmission in a Communication Channel
NVD-CWE-Other