1878 matches found
CVE-2023-24945 Windows iSCSI Target Service Information Disclosure Vulnerability
...
CVE-2023-24945 Windows iSCSI Target Service Information Disclosure Vulnerability
...
CVE-2023-24945
CVE-2023-24945 concerns Windows iSCSI Target Service Information Disclosure. Data shows CVSS v3.1 base score 5.5 (Medium) with LOCAL attacker, LOW complexity, LOW privileges required, and high confidentiality impact. The description names the Windows iSCSI Target Service but does not provide spec...
kernel: scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
A flaw was found in the iSCSI TCP component in the Linux kernel. A race condition between releasing a socket and accessing it via sysfs can lead to a NULL pointer dereference when calling getpeername. This issue can cause a crash and result in a denial of service...
Windows iSCSI Target Service Information Disclosure Vulnerability
...
PT-2025-26141 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been resolved, related to the SCSI device removal while in active use. When a SCSI device is removed, the kernel would immediately return an error on...
Microsoft Windows iSCSI Target Service 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows iSCSI Target Service. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Versi...
A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information.
...
AZL-26341 CVE-2023-2162 affecting package kernel for versions less than 5.15.111.1-1
A use-after-free vulnerability was found in iscsiswtcpsessioncreate in drivers/scsi/iscsitcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information...
DEBIAN-CVE-2023-2162
A use-after-free vulnerability was found in iscsiswtcpsessioncreate in drivers/scsi/iscsitcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information...
CVE-2023-2162
Astra Linux security bulletin mirrors CVE-2023-2162, documenting a use-after-free in Linux kernel (iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c) that could allow a local attacker to leak kernel internal information. The Astra Linux entry identifies the affected kernel subcomponent (SCS...
CVE-2023-2162
A use-after-free vulnerability was found in iscsiswtcpsessioncreate in drivers/scsi/iscsitcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information...
Linux kernel 资源管理错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux Kernel that originates from a corruption of the iscsiswtcpsessioncreate instruction responsible for freeing memory in the SCSI...
The vulnerability of the uip_process function in the net/ipv4/uip.c component of the iSCSI Open-iSCSI implementation allows a attacker to cause a service failure.
The vulnerability of the uipprocess function in the net/ipv4/uip.c component of the iSCSI Open-iSCSI implementation is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Denial Of Service (DoS)
wireshark is vulnerable to Denial Of Service DoS. An attacker can cause a iSCSI dissector crash, via packet injection or crafted capture file...
The vulnerability of the Windows iSCSI Discovery Service in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the Windows iSCSI Discovery Service in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system...
K15747621: Linux kernel vulnerability CVE-2020-28374
Security Advisory Description In drivers/target/targetcorexcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, ...
K73540515: Linux kernel vulnerability CVE-2018-14633
Security Advisory Description A security flaw was found in the chapservercomputemd5 function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash up to 1...
OESA-2023-1094 wireshark security update
Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.Wireshark, formerly known as Ethereal, can be used to examine the details of traffic at a variety of levels ranging fr...
SUSE CVE-2007-3100
usr/log.c in iscsid in open-iscsi iscsi-initiator-utils before 2.0-865 uses a semaphore with insecure permissions world-writable/world-readable for managing log messages using shared memory, which allows local users to cause a denial of service hang by grabbing the semaphore...