« Volver al listado

CVE-2025-14946

Estado: AplazadaMedia (4.8)—

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell (SSH) process, rather than as hostnames. This could lead to arbitrary code execution with the privileges of the user running libnbd.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Redhat — LibnbdAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-14946",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-14946",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-12-19T15:13:18.624274Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secalert@redhat.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.8,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 1.3
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "Red Hat",
          "product": "libnbd",
          "versions": [
            {
              "status": "affected",
              "version": "1.22.0",
              "lessThan": "1.22.5",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "1.23.0",
              "lessThan": "1.23.9",
              "versionType": "semver"
            }
          ],
          "packageName": "libnbd",
          "collectionURL": "https://gitlab.com/nbdkit/libnbd",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 10",
          "packageName": "libnbd",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "affected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 8",
          "packageName": "virt:rhel/libnbd",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 9",
          "packageName": "libnbd",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Virtualization 4",
          "packageName": "container-native-virtualization/virt-cdi-apiserver",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Virtualization 4",
          "packageName": "container-native-virtualization/virt-cdi-apiserver-rhel9",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Virtualization 4",
          "packageName": "container-native-virtualization/virt-cdi-cloner",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Virtualization 4",
          "packageName": "container-native-virtualization/virt-cdi-cloner-rhel9",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Virtualization 4",
          "packageName": "container-native-virtualization/virt-cdi-controller",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Virtualization 4",
          "packageName": "container-native-virtualization/virt-cdi-controller-rhel9",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Virtualization 4",
          "packageName": "container-native-virtualization/virt-cdi-importer",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Virtualization 4",
          "packageName": "container-native-virtualization/virt-cdi-importer-rhel9",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Virtualization 4",
          "packageName": "container-native-virtualization/virt-cdi-operator",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Virtualization 4",
          "packageName": "container-native-virtualization/virt-cdi-operator-rhel9",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Virtualization 4",
          "packageName": "container-native-virtualization/virt-cdi-uploadproxy",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Virtualization 4",
          "packageName": "container-native-virtualization/virt-cdi-uploadproxy-rhel9",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Virtualization 4",
          "packageName": "container-native-virtualization/virt-cdi-uploadserver",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:/a:redhat:container_native_virtualization:4"
          ],
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Virtualization 4",
          "packageName": "container-native-virtualization/virt-cdi-uploadserver-rhel9",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-12-19T13:16:03.127",
  "references": [
    {
      "url": "https://access.redhat.com/security/cve/CVE-2025-14946",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423789",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://libguestfs.org/libnbd-release-notes-1.24.1.html#Security",
      "source": "secalert@redhat.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secalert@redhat.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-88"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Uniform Resource Identifier (URI). This vulnerability arises because non-standard hostnames starting with '-o' are incorrectly interpreted as arguments to the Secure Shell (SSH) process, rather than as hostnames. This could lead to arbitrary code execution with the privileges of the user running libnbd."
    },
    {
      "lang": "es",
      "value": "Se encontró una falla en libnbd. Un actor malicioso podría explotar esto al convencer a libnbd de abrir un Identificador Uniforme de Recursos (URI) especialmente diseñado. Esta vulnerabilidad surge porque los nombres de host no estándar que comienzan con '-o' se interpretan incorrectamente como argumentos para el proceso de Secure Shell (SSH), en lugar de como nombres de host. Esto podría conducir a la ejecución de código arbitrario con los privilegios del usuario que ejecuta libnbd."
    }
  ],
  "lastModified": "2026-09-30T20:10:00.247",
  "sourceIdentifier": "secalert@redhat.com"
}