Alma Linux: CVE-2024-7383: Moderate: virt:rhel and virt-devel:rhel security update (Multiple Advisories)

Alma Linux: CVE-2024-7383: Moderate: virt:rhel and virt-devel:rhel security update (Multiple Advisories)

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

08/05/2024

Created

09/24/2024

Added

09/23/2024

Modified

11/14/2024

Description

A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.

Solution(s)

• alma-upgrade-hivex
• alma-upgrade-hivex-devel
• alma-upgrade-libguestfs
• alma-upgrade-libguestfs-appliance
• alma-upgrade-libguestfs-bash-completion
• alma-upgrade-libguestfs-devel
• alma-upgrade-libguestfs-gfs2
• alma-upgrade-libguestfs-gobject
• alma-upgrade-libguestfs-gobject-devel
• alma-upgrade-libguestfs-inspect-icons
• alma-upgrade-libguestfs-java
• alma-upgrade-libguestfs-java-devel
• alma-upgrade-libguestfs-javadoc
• alma-upgrade-libguestfs-man-pages-ja
• alma-upgrade-libguestfs-man-pages-uk
• alma-upgrade-libguestfs-rescue
• alma-upgrade-libguestfs-rsync
• alma-upgrade-libguestfs-tools
• alma-upgrade-libguestfs-tools-c
• alma-upgrade-libguestfs-winsupport
• alma-upgrade-libguestfs-xfs
• alma-upgrade-libiscsi
• alma-upgrade-libiscsi-devel
• alma-upgrade-libiscsi-utils
• alma-upgrade-libnbd
• alma-upgrade-libnbd-bash-completion
• alma-upgrade-libnbd-devel
• alma-upgrade-libtpms
• alma-upgrade-libtpms-devel
• alma-upgrade-libvirt
• alma-upgrade-libvirt-client
• alma-upgrade-libvirt-daemon
• alma-upgrade-libvirt-daemon-config-network
• alma-upgrade-libvirt-daemon-config-nwfilter
• alma-upgrade-libvirt-daemon-driver-interface
• alma-upgrade-libvirt-daemon-driver-network
• alma-upgrade-libvirt-daemon-driver-nodedev
• alma-upgrade-libvirt-daemon-driver-nwfilter
• alma-upgrade-libvirt-daemon-driver-qemu
• alma-upgrade-libvirt-daemon-driver-secret
• alma-upgrade-libvirt-daemon-driver-storage
• alma-upgrade-libvirt-daemon-driver-storage-core
• alma-upgrade-libvirt-daemon-driver-storage-disk
• alma-upgrade-libvirt-daemon-driver-storage-gluster
• alma-upgrade-libvirt-daemon-driver-storage-iscsi
• alma-upgrade-libvirt-daemon-driver-storage-iscsi-direct
• alma-upgrade-libvirt-daemon-driver-storage-logical
• alma-upgrade-libvirt-daemon-driver-storage-mpath
• alma-upgrade-libvirt-daemon-driver-storage-rbd
• alma-upgrade-libvirt-daemon-driver-storage-scsi
• alma-upgrade-libvirt-daemon-kvm
• alma-upgrade-libvirt-dbus
• alma-upgrade-libvirt-devel
• alma-upgrade-libvirt-docs
• alma-upgrade-libvirt-libs
• alma-upgrade-libvirt-lock-sanlock
• alma-upgrade-libvirt-nss
• alma-upgrade-libvirt-wireshark
• alma-upgrade-lua-guestfs
• alma-upgrade-nbdfuse
• alma-upgrade-nbdkit
• alma-upgrade-nbdkit-bash-completion
• alma-upgrade-nbdkit-basic-filters
• alma-upgrade-nbdkit-basic-plugins
• alma-upgrade-nbdkit-curl-plugin
• alma-upgrade-nbdkit-devel
• alma-upgrade-nbdkit-example-plugins
• alma-upgrade-nbdkit-gzip-filter
• alma-upgrade-nbdkit-gzip-plugin
• alma-upgrade-nbdkit-linuxdisk-plugin
• alma-upgrade-nbdkit-nbd-plugin
• alma-upgrade-nbdkit-python-plugin
• alma-upgrade-nbdkit-server
• alma-upgrade-nbdkit-ssh-plugin
• alma-upgrade-nbdkit-tar-filter
• alma-upgrade-nbdkit-tar-plugin
• alma-upgrade-nbdkit-tmpdisk-plugin
• alma-upgrade-nbdkit-vddk-plugin
• alma-upgrade-nbdkit-xz-filter
• alma-upgrade-netcf
• alma-upgrade-netcf-devel
• alma-upgrade-netcf-libs
• alma-upgrade-ocaml-hivex
• alma-upgrade-ocaml-hivex-devel
• alma-upgrade-ocaml-libguestfs
• alma-upgrade-ocaml-libguestfs-devel
• alma-upgrade-ocaml-libnbd
• alma-upgrade-ocaml-libnbd-devel
• alma-upgrade-perl-hivex
• alma-upgrade-perl-sys-guestfs
• alma-upgrade-perl-sys-virt
• alma-upgrade-python3-hivex
• alma-upgrade-python3-libguestfs
• alma-upgrade-python3-libnbd
• alma-upgrade-python3-libvirt
• alma-upgrade-qemu-guest-agent
• alma-upgrade-qemu-img
• alma-upgrade-qemu-kvm
• alma-upgrade-qemu-kvm-block-curl
• alma-upgrade-qemu-kvm-block-gluster
• alma-upgrade-qemu-kvm-block-iscsi
• alma-upgrade-qemu-kvm-block-rbd
• alma-upgrade-qemu-kvm-block-ssh
• alma-upgrade-qemu-kvm-common
• alma-upgrade-qemu-kvm-core
• alma-upgrade-qemu-kvm-docs
• alma-upgrade-qemu-kvm-hw-usbredir
• alma-upgrade-qemu-kvm-tests
• alma-upgrade-qemu-kvm-ui-opengl
• alma-upgrade-qemu-kvm-ui-spice
• alma-upgrade-ruby-hivex
• alma-upgrade-ruby-libguestfs
• alma-upgrade-seabios
• alma-upgrade-seabios-bin
• alma-upgrade-seavgabios-bin
• alma-upgrade-sgabios
• alma-upgrade-sgabios-bin
• alma-upgrade-slof
• alma-upgrade-supermin
• alma-upgrade-supermin-devel
• alma-upgrade-swtpm
• alma-upgrade-swtpm-devel
• alma-upgrade-swtpm-libs
• alma-upgrade-swtpm-tools
• alma-upgrade-swtpm-tools-pkcs11
• alma-upgrade-virt-dib
• alma-upgrade-virt-v2v
• alma-upgrade-virt-v2v-bash-completion
• alma-upgrade-virt-v2v-man-pages-ja
• alma-upgrade-virt-v2v-man-pages-uk

References

• https://attackerkb.com/topics/cve-2024-7383
• CVE - 2024-7383
• https://errata.almalinux.org/8/ALSA-2024-6964.html
• https://errata.almalinux.org/9/ALSA-2024-6757.html