CVE-2022-0485: falha em libnbd
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.0%
A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as successful, rather than checking the *error parameter. This could result in the silent creation of a corrupted destination image.
Produtos afetados
n/a · libnbdReferências
https://access.redhat.com/security/cve/CVE-2022-0485https://bugzilla.redhat.com/show_bug.cgi?id=2046194https://bugzilla.redhat.com/show_bug.cgi?id=2050324https://gitlab.com/nbdkit/libnbd/-/commit/8d444b41d09a700c7ee6f9182a649f3f2d325abbhttps://listman.redhat.com/archives/libguestfs/2022-February/msg00104.html