CVE-2024-7383 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-7383 Interim 1 13 2026-03-05T02:56:57Z current 2024-08-05T23:18:00Z 2026-03-05T02:56:57Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-7383 A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/suse-liberty-linux-updates/2024-September/000052.html E-Mail link for RHSA-2024:6757 https://lists.suse.com/pipermail/sle-updates/2024-August/036332.html E-Mail link for SUSE-SU-2024:2789-1 https://lists.suse.com/pipermail/sle-security-updates/2024-August/019138.html E-Mail link for SUSE-SU-2024:2813-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 9 SUSE Linux Enterprise Module for Server Applications 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Module for Server Applications 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP7 openSUSE Leap 15.5 openSUSE Leap 15.6 openSUSE Tumbleweed libnbd-1.18.1-4.el9_4 libnbd-1.18.5-150300.8.21.1 libnbd-1.18.5-150600.18.3.1 libnbd-1.20.2-1.1 libnbd-1.20.3-150700.1.8 libnbd-1.22.2-160000.2.2 libnbd-bash-completion-1.18.1-4.el9_4 libnbd-bash-completion-1.18.5-150300.8.21.1 libnbd-bash-completion-1.18.5-150600.18.3.1 libnbd-bash-completion-1.20.2-1.1 libnbd-bash-completion-1.22.2-160000.2.2 libnbd-devel-1.18.1-4.el9_4 libnbd-devel-1.18.5-150300.8.21.1 libnbd-devel-1.18.5-150600.18.3.1 libnbd-devel-1.20.2-1.1 libnbd0-1.18.5-150300.8.21.1 libnbd0-1.18.5-150600.18.3.1 libnbd0-1.20.2-1.1 libnbd0-1.20.3-150700.1.8 libnbd0-1.22.2-160000.2.2 nbdfuse-1.18.1-4.el9_4 nbdfuse-1.18.5-150300.8.21.1 nbdfuse-1.18.5-150600.18.3.1 nbdfuse-1.20.2-1.1 nbdfuse-1.20.3-150700.1.8 nbdfuse-1.22.2-160000.2.2 ocaml-libnbd-1.18.1-4.el9_4 ocaml-libnbd-devel-1.18.1-4.el9_4 python3-libnbd-1.18.1-4.el9_4 python3-libnbd-1.18.5-150300.8.21.1 python3-libnbd-1.18.5-150600.18.3.1 python3-libnbd-1.20.2-1.1 python3-libnbd-1.22.2-160000.2.2 libnbd-1.18.1-4.el9_4 as a component of SUSE Liberty Linux 9 libnbd-bash-completion-1.18.1-4.el9_4 as a component of SUSE Liberty Linux 9 libnbd-devel-1.18.1-4.el9_4 as a component of SUSE Liberty Linux 9 nbdfuse-1.18.1-4.el9_4 as a component of SUSE Liberty Linux 9 ocaml-libnbd-1.18.1-4.el9_4 as a component of SUSE Liberty Linux 9 ocaml-libnbd-devel-1.18.1-4.el9_4 as a component of SUSE Liberty Linux 9 python3-libnbd-1.18.1-4.el9_4 as a component of SUSE Liberty Linux 9 libnbd-1.18.5-150600.18.3.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 libnbd0-1.18.5-150600.18.3.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 nbdfuse-1.18.5-150600.18.3.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 libnbd-1.20.3-150700.1.8 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 libnbd0-1.20.3-150700.1.8 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 nbdfuse-1.20.3-150700.1.8 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 libnbd-1.22.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libnbd-bash-completion-1.22.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libnbd0-1.22.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 nbdfuse-1.22.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python3-libnbd-1.22.2-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libnbd-1.18.5-150300.8.21.1 as a component of openSUSE Leap 15.5 libnbd-bash-completion-1.18.5-150300.8.21.1 as a component of openSUSE Leap 15.5 libnbd-devel-1.18.5-150300.8.21.1 as a component of openSUSE Leap 15.5 libnbd0-1.18.5-150300.8.21.1 as a component of openSUSE Leap 15.5 nbdfuse-1.18.5-150300.8.21.1 as a component of openSUSE Leap 15.5 python3-libnbd-1.18.5-150300.8.21.1 as a component of openSUSE Leap 15.5 libnbd-1.18.5-150600.18.3.1 as a component of openSUSE Leap 15.6 libnbd-bash-completion-1.18.5-150600.18.3.1 as a component of openSUSE Leap 15.6 libnbd-devel-1.18.5-150600.18.3.1 as a component of openSUSE Leap 15.6 libnbd0-1.18.5-150600.18.3.1 as a component of openSUSE Leap 15.6 nbdfuse-1.18.5-150600.18.3.1 as a component of openSUSE Leap 15.6 python3-libnbd-1.18.5-150600.18.3.1 as a component of openSUSE Leap 15.6 libnbd-1.20.2-1.1 as a component of openSUSE Tumbleweed libnbd-bash-completion-1.20.2-1.1 as a component of openSUSE Tumbleweed libnbd-devel-1.20.2-1.1 as a component of openSUSE Tumbleweed libnbd0-1.20.2-1.1 as a component of openSUSE Tumbleweed nbdfuse-1.20.2-1.1 as a component of openSUSE Tumbleweed python3-libnbd-1.20.2-1.1 as a component of openSUSE Tumbleweed A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic. CVE-2024-7383 SUSE Liberty Linux 9:libnbd-1.18.1-4.el9_4 SUSE Liberty Linux 9:libnbd-bash-completion-1.18.1-4.el9_4 SUSE Liberty Linux 9:libnbd-devel-1.18.1-4.el9_4 SUSE Liberty Linux 9:nbdfuse-1.18.1-4.el9_4 SUSE Liberty Linux 9:ocaml-libnbd-1.18.1-4.el9_4 SUSE Liberty Linux 9:ocaml-libnbd-devel-1.18.1-4.el9_4 SUSE Liberty Linux 9:python3-libnbd-1.18.1-4.el9_4 SUSE Linux Enterprise Module for Server Applications 15 SP6:libnbd-1.18.5-150600.18.3.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:libnbd0-1.18.5-150600.18.3.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:nbdfuse-1.18.5-150600.18.3.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:libnbd-1.20.3-150700.1.8 SUSE Linux Enterprise Module for Server Applications 15 SP7:libnbd0-1.20.3-150700.1.8 SUSE Linux Enterprise Module for Server Applications 15 SP7:nbdfuse-1.20.3-150700.1.8 SUSE Linux Enterprise Server 16.0:libnbd-1.22.2-160000.2.2 SUSE Linux Enterprise Server 16.0:libnbd-bash-completion-1.22.2-160000.2.2 SUSE Linux Enterprise Server 16.0:libnbd0-1.22.2-160000.2.2 SUSE Linux Enterprise Server 16.0:nbdfuse-1.22.2-160000.2.2 SUSE Linux Enterprise Server 16.0:python3-libnbd-1.22.2-160000.2.2 openSUSE Leap 15.5:libnbd-1.18.5-150300.8.21.1 openSUSE Leap 15.5:libnbd-bash-completion-1.18.5-150300.8.21.1 openSUSE Leap 15.5:libnbd-devel-1.18.5-150300.8.21.1 openSUSE Leap 15.5:libnbd0-1.18.5-150300.8.21.1 openSUSE Leap 15.5:nbdfuse-1.18.5-150300.8.21.1 openSUSE Leap 15.5:python3-libnbd-1.18.5-150300.8.21.1 openSUSE Leap 15.6:libnbd-1.18.5-150600.18.3.1 openSUSE Leap 15.6:libnbd-bash-completion-1.18.5-150600.18.3.1 openSUSE Leap 15.6:libnbd-devel-1.18.5-150600.18.3.1 openSUSE Leap 15.6:libnbd0-1.18.5-150600.18.3.1 openSUSE Leap 15.6:nbdfuse-1.18.5-150600.18.3.1 openSUSE Leap 15.6:python3-libnbd-1.18.5-150600.18.3.1 openSUSE Tumbleweed:libnbd-1.20.2-1.1 openSUSE Tumbleweed:libnbd-bash-completion-1.20.2-1.1 openSUSE Tumbleweed:libnbd-devel-1.20.2-1.1 openSUSE Tumbleweed:libnbd0-1.20.2-1.1 openSUSE Tumbleweed:nbdfuse-1.20.2-1.1 openSUSE Tumbleweed:python3-libnbd-1.20.2-1.1 important 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N