2462 matches found
CVE-2021-3139
In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopylocateudev in tcmurcmdhandler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request. For example, an attack can occur over a network if th...
CVE-2021-3139
CVE-2021-3139 affects Open-iSCSI tcmu-runner 1.3.x–1.5.x (through 1.5.2); the XCOPY path xcopy_locate_udev in tcmur_cmd_handler.c lacks transport-layer access checks, enabling remote attackers who have access to an iSCSI LUN to read/write files via directory traversal over the network. Connected ...
Directory traversal
In drivers/target/targetcorexcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a...
CVE-2020-28374
In drivers/target/targetcorexcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a...
CVE-2020-28374
In drivers/target/targetcorexcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a...
CVE-2020-28374
In drivers/target/targetcorexcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a...
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9005)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9005 advisory. - target: fix XCOPY NAA identifier lookup David Disseldorp Orabug: 32248040 CVE-2020-28374 - xenbus/xenbusbackend: Disallow pending watch messages...
CVE-2021-3139: Improper Limitation of a Pathname to a Restricted Directory
In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopylocateudev in tcmurcmdhandler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request. For example, an attack can occur over a network if th...
PT-2021-19281
Name of the Vulnerable Software and Affected Versions Open-iSCSI tcmu-runner versions 1.3.x through 1.5.2 Description The issue allows remote attackers to read or write files via directory traversal in an XCOPY request, due to a lack of check for transport-layer restrictions in the xcopy locate...
Open Iscsi Tcmu-runner Path Traversal Vulnerability
Open Iscsi Tcmu-runner is an Open Iscsi individual developer's daemon for handling the LIO TCM-User backstore userspace in Iscsi. A path traversal vulnerability exists in Open-iSCSI tcmu-runner, which stems from a lack of checking of transport layer restrictions by the program, allowing remote...
ceph-ansible: insecure ownership on /etc/ceph/iscsi-gateway.conf configuration file
A flaw was found in Ceph-ansible where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information within this file. The highest threat from this vulnerability is to confidentiality...
PT-2021-2997
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.7 Description The issue is related to insufficient identifier checking in the LIO SCSI target code, which can be exploited by remote attackers to read or write files via directory traversal in an XCOPY...
Huawei EulerOS: Security Advisory for open-iscsi (EulerOS-SA-2021-1031)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for open-iscsi (EulerOS-SA-2021-1012)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : open-iscsi (EulerOS-SA-2021-1031)
According to the versions of the open-iscsi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is...
EulerOS 2.0 SP9 : open-iscsi (EulerOS-SA-2021-1012)
According to the versions of the open-iscsi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is...
QEMU heap buffer overflow vulnerability (CNVD-2021-00892)
QEMU is a set of simulation processors written by Fabrice Bellard and distributed with source code under the GPL license, widely used on the GNU/Linux platform. A heap buffer overflow vulnerability exists in iscsiaioioctlcb in block/iscsi.c in QEMU 4.1.0. An attacker can exploit this vulnerabilit...
DEBIAN-CVE-2020-11947
iscsiaioioctlcb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker...