CVE Intelligence

Vulnerabilidades do Red Hat Libnbd

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Red Hat Libnbd: 1 registro(s), com versões afetadas e correções.

CVE-2025-14946 Média · 4.8 CWE-88 19/12/2025
Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri
A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell (SSH) process, rather than as hostnames. This could lead to arbitrary code execution with the privileges of the user running libnbd.