CVE-2021-20286: Low severity redhat libnbd vulnerability
A flaw was found in libnbd 1.7.3. An assertion failure in nbdunlockedoptgo in ilb/opt.c may lead to denial of service.
Other sources
A flaw was found in libnbd. An assertion failure in in nbdunlockedoptgo in ilb/opt.c may lead to denial of service.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/libnbdto a version that resolves this vulnerability.Fixed in 1.7.3 - Upgrade
Upgrade
alpine/libnbdto a version that resolves this vulnerability.Fixed in 1.10.5-r0
Event History
Frequently Asked Questions
What is CVE-2021-20286?
CVE-2021-20286 is a vulnerability found in libnbd 1.7.3 that can lead to denial of service.
What is the severity of CVE-2021-20286?
The severity of CVE-2021-20286 is medium with a severity value of 2.7.
Which software versions are affected by CVE-2021-20286?
Versions up to and exclusive of 1.7.3 of Redhat Libnbd, as well as Redhat Enterprise Linux 8.3.0 with advanced virtualization, are affected by CVE-2021-20286.
How can CVE-2021-20286 be exploited?
Exploiting CVE-2021-20286 can lead to denial of service.
Is there a fix available for CVE-2021-20286?
Yes, a fix is available for CVE-2021-20286. Please refer to the provided references for more information.