Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-2221
HistoryJul 08, 2010 - 6:30 p.m.

CVE-2010-2221

2010-07-0818:30:00
CWE-119
[email protected]
web.nvd.nist.gov
27
cve-2010-2221
buffer overflow
isns
linux
scsi
tgt
scsi-target-utils
iscsi
iscsitarget
iet
scst
iscsi-scst
memory corruption
denial of service

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8.1 High

AI Score

Confidence

High

0.593 Medium

EPSS

Percentile

97.8%

JSON

Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.

Affected configurations

NVD
Node
zaaltgtRange≤1.0.5
OR
zaaltgtMatch0.9.5
OR
zaaltgtMatch1.0.0
OR
zaaltgtMatch1.0.1
OR
zaaltgtMatch1.0.2
OR
zaaltgtMatch1.0.3
OR
zaaltgtMatch1.0.4
AND
linuxlinux_kernel
Node
arne_redlich_\&_ross_walkeriscsitargetRange≤1.4.20
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.1.0
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.2.0
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.2.1
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.2.2
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.2.3
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.2.4
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.2.5
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.2.6
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.3.0
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.3.1
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.3.2
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.3.3
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.3.4
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.3.5
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.3.6
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.3.7
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.3.8
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.0
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.1
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.2
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.3
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.4
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.5
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.6
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.7
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.8
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.9
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.10
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.11
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.12
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.13
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.14
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.15
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.16
OR
arne_redlich_\&_ross_walkeriscsitargetMatch0.4.17
OR
arne_redlich_\&_ross_walkeriscsitargetMatch1.4.18
OR
arne_redlich_\&_ross_walkeriscsitargetMatch1.4.19
Node
vladislav_bolkhovitingeneric_scsi_target_subsystemRange≤1.0.1
OR
vladislav_bolkhovitingeneric_scsi_target_subsystemMatch0.9.0a
OR
vladislav_bolkhovitingeneric_scsi_target_subsystemMatch0.9.1
OR
vladislav_bolkhovitingeneric_scsi_target_subsystemMatch0.9.2
OR
vladislav_bolkhovitingeneric_scsi_target_subsystemMatch0.9.3
OR
vladislav_bolkhovitingeneric_scsi_target_subsystemMatch0.9.3pre1
OR
vladislav_bolkhovitingeneric_scsi_target_subsystemMatch0.9.3pre2
OR
vladislav_bolkhovitingeneric_scsi_target_subsystemMatch0.9.3pre4
OR
vladislav_bolkhovitingeneric_scsi_target_subsystemMatch0.9.4
OR
vladislav_bolkhovitingeneric_scsi_target_subsystemMatch0.9.5
OR
vladislav_bolkhovitingeneric_scsi_target_subsystemMatch0.9.5.1
OR
vladislav_bolkhovitingeneric_scsi_target_subsystemMatch0.9.5.2
OR
vladislav_bolkhovitingeneric_scsi_target_subsystemMatch1.0.0
AND
linuxlinux_kernel

References

Related

checkpoint_advisories 2
cvelist 1
nvd 1
veracode 1
nessus 16
securityvulns 2
redhat 1
openvas 12
ubuntucve 1
prion 1
oraclelinux 1
centos 1
fedora 1
ubuntu 1
checkpoint_advisories
checkpoint_advisories
iSCSI target Multiple Implementations iSNS Stack Buffer Overflow (CVE-2010-2221)
2010-09-27 00:00:00
iSCSI target Multiple Implementations iSNS Stack Buffer Overflow - High Confidence (CVE-2010-2221)
2013-04-22 00:00:00
cvelist
cvelist
CVE-2010-2221
2010-07-08 18:00:00
nvd
nvd
CVE-2010-2221
2010-07-08 18:30:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:49:05
nessus
nessus
RHEL 5 : scsi-target-utils (RHSA-2010:0518)
2013-01-24 00:00:00
Oracle Linux 5 : scsi-target-utils (ELSA-2010-0518)
2013-07-12 00:00:00
CentOS 5 : scsi-target-utils (CESA-2010:0518)
2010-07-16 00:00:00
securityvulns
securityvulns
Multiple iSCSI implementations security vulnerabilities
2010-07-06 00:00:00
TELUS Security Labs VR - iSCSI target Multiple Implementations iSNS Stack Buffer Overflow
2010-07-06 00:00:00
redhat
redhat
(RHSA-2010:0518) Important: scsi-target-utils security update
2010-07-08 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2010-0518)
2015-10-06 00:00:00
CentOS Update for scsi-target-utils CESA-2010:0518 centos5 i386
2011-08-09 00:00:00
CentOS Update for scsi-target-utils CESA-2010:0518 centos5 i386
2011-08-09 00:00:00
ubuntucve
ubuntucve
CVE-2010-2221
2010-07-08 00:00:00
prion
prion
Buffer overflow
2010-07-08 18:30:00
oraclelinux
oraclelinux
scsi-target-utils security update
2010-07-08 00:00:00
centos
centos
scsi security update
2010-07-14 22:27:09
fedora
fedora
[SECURITY] Fedora 14 Update: scsi-target-utils-1.0.18-1.fc14
2011-07-12 04:55:18
ubuntu
ubuntu
tgt vulnerabilities
2011-06-21 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8.1 High

AI Score

Confidence

High

0.593 Medium

EPSS

Percentile

97.8%

JSON
Related for CVE-2010-2221
checkpoint_advisories2cvelist1nvd1veracode1nessus16securityvulns2redhat1openvas12ubuntucve1prion1oraclelinux1centos1fedora1ubuntu1