CVE-2024-7383

CVSS 3.1 Score 7.4 of 10 (high)

Details

Published Aug 5, 2024
Updated: Aug 6, 2024
CWE ID 295

Summary

CVE-2024-7383 is a vulnerability affecting libnbd, a network block device library. The flaw arises from the client's failure to rigorously check the NBD server's certificate during TLS handshakes. This oversight opens the door for man-in-the-middle attacks, potentially compromising data transmitted over NBD traffic. The vulnerability poses a serious risk for organizations that use NBD for remote storage access or backup solutions. It is advisable to update affected systems with the latest version of libnbd to mitigate the threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share