Virtuozzo Hybrid Server 7.5 Update 2 (7.5.2-436)

Virtuozzo Hybrid Server 7.5 Update 2 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1160.41.1.vz7.183.5. Vulnerability id: PSBM-130799 The rate set with the '--rate' option could not be unset. Vulnerability id: PSBM-132757 pcompact...

Fix of CVE: CVE-2021-27364, CVE-2021-27363, CVE-2021-27365

CVE-2021-27365: scsi: iscsi: Ensure sysfs attributes are limited to PAGESIZE - CVE-2021-27365: scsi: iscsi: Verify lengths on passthrough PDUs - CVE-2021-27363: CVE-2021-27364: scsi: iscsi: Restrict sessions and handles to admin capabilities - sysfs: Add sysfsemit and sysfsemitat to format sysfs...

UBUNTU-CVE-2021-38575

NetworkPkg/IScsiDxe has remotely exploitable buffer overflows...

edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe

A flaw was found in edk2. Missing checks in the IScsiHexToBin function in NetworkPkg/IScsiDxe lead to a buffer overflow allowing a remote attacker, who can inject himself in the communication between edk2 and the iSCSI target, to write arbitrary data to any address in the edk2 firmware and...

edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe

A flaw was found in edk2. Missing checks in the IScsiHexToBin function in NetworkPkg/IScsiDxe lead to a buffer overflow allowing a remote attacker, who can inject himself in the communication between edk2 and the iSCSI target, to write arbitrary data to any address in the edk2 firmware and...

edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe

A flaw was found in edk2. Missing checks in the IScsiHexToBin function in NetworkPkg/IScsiDxe lead to a buffer overflow allowing a remote attacker, who can inject himself in the communication between edk2 and the iSCSI target, to write arbitrary data to any address in the edk2 firmware and...

edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe

A flaw was found in edk2. Missing checks in the IScsiHexToBin function in NetworkPkg/IScsiDxe lead to a buffer overflow allowing a remote attacker, who can inject himself in the communication between edk2 and the iSCSI target, to write arbitrary data to any address in the edk2 firmware and...

GSD-2021-1001383 scsi: iscsi: Fix conn use after free during resets

scsi: iscsi: Fix conn use after free during resets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.198 by commit...

UVI-2021-1001383 scsi: iscsi: Fix conn use after free during resets

scsi: iscsi: Fix conn use after free during resets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.198 by commit...

UVI-2021-1001335 scsi: iscsi: Fix conn use after free during resets

scsi: iscsi: Fix conn use after free during resets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.134 by commit...

GSD-2021-1001335 scsi: iscsi: Fix conn use after free during resets

scsi: iscsi: Fix conn use after free during resets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.134 by commit...

GSD-2021-1001276 scsi: iscsi: Fix conn use after free during resets

scsi: iscsi: Fix conn use after free during resets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.52 by commit...

UVI-2021-1001276 scsi: iscsi: Fix conn use after free during resets

scsi: iscsi: Fix conn use after free during resets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.52 by commit...

GSD-2021-1001200 scsi: iscsi: Fix conn use after free during resets

scsi: iscsi: Fix conn use after free during resets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit...

UVI-2021-1001200 scsi: iscsi: Fix conn use after free during resets

scsi: iscsi: Fix conn use after free during resets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit...

PT-2021-29665

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.4 Description The issue is related to a potential use after free error during resets in the iscsi component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven...

PT-2021-25853

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to a potential use after free error during resets in the iscsi component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven...

PT-2021-29800

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue is related to a potential use after free error during resets in the iscsi component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven...

PT-2021-25805

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue is related to a potential use after free error during resets in the iscsi component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven...

PT-2021-29848

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to a potential use after free error during resets in the iscsi component of the scsi subsystem. The actual impact and attack plausibility have not yet been proven...