CVE-2021-20286: Medium severity redhat libnbd vulnerability
Published Mar 3, 2021
·Updated
A flaw was found in libnbd 1.7.3. An assertion failure in nbdunlockedoptgo in ilb/opt.c may lead to denial of service.
Other sources
A flaw was found in libnbd. An assertion failure in in nbdunlockedoptgo in ilb/opt.c may lead to denial of service.
— Red Hat
Affected Software
5 affected componentsFixes available
redhat/libnbd<1.7.3
1.7.3
redhat libnbd<1.7.3
redhat Enterprise Linux=8.3.0
Microsoft azl3 libnbd 1.18.3-1
Microsoft azl3 libnbd 1.12.1-3
Remediation
Event History
Mar 15, 2021
CVE Published
via MITRE·05:38 PM
Data Sourced
via MITRE·05:38 PM
DescriptionWeakness
Jan 19, 2022
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:00 AM
Affected Software
Updated
via Microsoft·08:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-20286?
CVE-2021-20286 is a vulnerability found in libnbd 1.7.3 that can lead to denial of service.
2
What is the severity of CVE-2021-20286?
The severity of CVE-2021-20286 is medium with a severity value of 2.7.
3
Which software versions are affected by CVE-2021-20286?
Versions up to and exclusive of 1.7.3 of Redhat Libnbd, as well as Redhat Enterprise Linux 8.3.0 with advanced virtualization, are affected by CVE-2021-20286.
4
How can CVE-2021-20286 be exploited?
Exploiting CVE-2021-20286 can lead to denial of service.
5
Is there a fix available for CVE-2021-20286?
Yes, a fix is available for CVE-2021-20286. Please refer to the provided references for more information.