CVE-2021-3716

    Dashboard / Vulnerabilities / CVE-2021-3716

    CVE-2021-3716

    Published: 2 Mar 2022Last Modified: 8 Jul 2026

    Summary:

    Details: A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.

    References: https://listman.redhat.com/archives/libguestfs/2021-August/msg00083.html, https://www.openwall.com/lists/oss-security/2021/08/18/2, https://bugzilla.redhat.com/show_bug.cgi?id=1994695, https://gitlab.com/nbdkit/nbdkit/-/commit/09a13dafb7bb3a38ab52eb5501cba786365ba7fd, https://gitlab.com/nbdkit/nbdkit/-/commit/6c5faac6a37077cf2366388a80862bb00616d0d8

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- e04c01350cbec0084bdcdca0e35f68724a7ff957
    Fixed -6d28ae47be983be20641d10058cd07f8db29ecfc

    Affected versions

    v1.27.7
    v1.27.6
    v1.27.5
    v1.27.4
    v1.27.3
    v1.27.2
    v1.27.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-3716 | CVE-DB