263 matches found
CVE-2024-42416
The ctlreportsupportedopcodes function did not sufficiently validate a field provided by userspace, allowing an arbitrary write to a limited amount of kernel help memory. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on...
CVE-2024-45063 Multiple issues in ctl(4) CAM Target Layer
The function ctlwritebuffer incorrectly set a flag which resulted in a kernel Use-After-Free when a command finished processing. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process,...
CVE-2024-43110 Multiple issues in ctl(4) CAM Target Layer
The ctlrequestsense function could expose up to three bytes of the kernel heap to userspace. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process, which typically runs as root. Note th...
kernel: scsi: target: iscsit: Free cmds before session free
A use-after-free vulnerability was found in the Linux kernel's iSCSI target subsystem. When the Time2Retain timer expires and an iSCSI session is being cleaned up, commands from recovery entries are freed after the session has already been closed. This leads to a NULL pointer dereference or...
Virtuozzo Hybrid Infrastructure 5.4 Update 4 (5.4.4-112)
This update delivers a new feature for the compute service, performance optimization for the object storage, as well as stability, security, and performance improvements. Vulnerability id: VSTOR-74916 VMs with Windows Server 2019, Windows Server 2022, and Windows 10 fail to boot after installatio...
RLSA-2023:3847 Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tls: race condition in dotlsgetsockopt may lead to use-after-free or NULL pointer dereference CVE-2023-28466 For more details about the security issues, including the impact, a CVSS score...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update Support, and Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impac...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 7.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2023-29367
iSCSI Target WMI Provider Remote Code Execution Vulnerability...
CVE-2023-29367
iSCSI Target WMI Provider Remote Code Execution Vulnerability...
Remote code execution
iSCSI Target WMI Provider Remote Code Execution Vulnerability...
CVE-2023-29367 iSCSI Target WMI Provider Remote Code Execution Vulnerability
...
CVE-2023-29367 iSCSI Target WMI Provider Remote Code Execution Vulnerability
...
PT-2023-3132 · Microsoft · Iscsi Target Wmi Provider +1
Name of the Vulnerable Software and Affected Versions: iSCSI Target WMI Provider affected versions not specified Description: The issue is related to insufficient input validation in the Windows iSCSI Target service, which can be exploited by remote attackers to execute arbitrary code on the...
kernel: scsi: target: iscsi: Fix a race condition between login_work and the login thread
A flaw was found in the iSCSI target component in the Linux kernel. An attacker that can send specific data immediately after a login Protocol Data Unit PDU, can trigger a race condition. This condition can lead to a NULL pointer dereference, causing the kernel to crash and resulting in a denial ...
The vulnerability of the Windows iSCSI Target service allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Windows iSCSI Target service for Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2023-24945
Windows iSCSI Target Service Information Disclosure Vulnerability...