ALBA-2021:4446 iscsi-initiator-utils bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

iscsi-initiator-utils bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

CVE-2021-27004

System Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow a local attacker to discover plaintext iSCSI CHAP credentials...

Design/Logic Flaw

System Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow a local attacker to discover plaintext iSCSI CHAP credentials...

CVE-2021-27004

System Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow a local attacker to discover plaintext iSCSI CHAP credentials...

CVE-2021-27004

System Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow a local attacker to discover plaintext iSCSI CHAP credentials...

CVE-2021-27004

CVE-2021-27004 affects NetApp System Manager 9.x (versions 9.7 and higher up to but not including 9.7P16, 9.8P7, and 9.9.1P2). The documented flaw allows a local attacker to discover plaintext iSCSI CHAP credentials. Red Hat and other sources corroborate the same impact for System Manager in affe...

PT-2021-17229

Name of the Vulnerable Software and Affected Versions: System Manager 9.x versions 9.7 through 9.7P15 System Manager 9.x versions 9.8 through 9.8P6 System Manager 9.x version 9.9.1P1 Description: The issue allows a local attacker to discover plaintext iSCSI CHAP credentials. Recommendations: For...

CVE-2021-27004: Undefined Security Weakness

System Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow a local attacker to discover plaintext iSCSI CHAP credentials...

Clustered Data ONTAP security vulnerabilities

Netapp Clustered Data ONTAP is a storage operating system for clustered mode from the US-based Netapp. A security vulnerability exists in Clustered Data ONTAP that could allow a local attacker to discover plain text iSCSI CHAP credentials. The following products and versions are affected: System...

QEMU Block Buffer Overflow DoS

The vulnerability in the block/iscsi.c component of the QEMU hardware emulation software involves reading data from beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data...

NewStart CGSL CORE 5.05 / MAIN 5.05 : python-rtslib Vulnerability (NS-SA-2021-0185)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has python-rtslib packages installed that are affected by a vulnerability: - Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used, and...

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2021-0115)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities: - DISPUTED A memory leak in the nl80211getftmresponderstats function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to...

CLSA-2021-1634922728 Fixed 22 CVEs in kernel

ELS-138: netfilter: xtables: add missing tables zeroing - ELS-138: CVE-2021-33909: seqfile: disallow extremely large seq buffer allocation - ELS-138: CVE-2021-22555: netfilter: xtables: fix compat match/target pad out-of-bound write - ELS-138: CVE-2020-29661: tty: Fix -pgrp locking in tiocspgrp -...

GSD-2021-1001683 scsi: iscsi: Fix iscsi_task use after free

scsi: iscsi: Fix iscsitask use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.12 by commit...

UVI-2021-1001683 scsi: iscsi: Fix iscsi_task use after free

scsi: iscsi: Fix iscsitask use after free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.12 by commit...

PT-2021-30148

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to a use after free error in the iscsi task. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-26153

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to a use after free in the iscsi task. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.14.12,...

PT-2024-11423

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel, specifically in the scsi: iscsi component. The issue arises from a use-after-free error in the iscsi task due to changes in abort...

OESA-2021-1358 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: A flaw was found in edk2. Missing checks in the IScsiHexToBin function in NetworkPkg/IScsiDxe lead to a buffer overflow allowing a remote attacker, who can inject...