Security Advisory
CVE-2024-7383
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A flaw was found in libnbd. The client did not always correctly verify the NBD servers certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.