17 matches found
CVE-2026-63887
The CVE-2026-63887 issue affects Linux kernel SCSI/ISCSI login handling. iscsi_encode_text_output() concatenates key=value records into login->rsp_buf using an 8192-byte buffer without checking remaining capacity, while a single PDU can carry up to 2048 pairs, potentially expanding to ~32 KiB....
CVE-2026-63887 scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf iscsiencodetextoutput concatenates "key=value\0" records into login-rspbuf, an 8192-byte kzallocMAXKEYVALUEPAIRS buffer allocated in iscsitallocloginsetupbuffer...
EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-1091)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : net: drop UFO packets in udprcvsegmentCVE-2025-38622 A transient execution vulnerability in some AMD processors may allow an attacker to infer dat...
EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-1071)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : net: drop UFO packets in udprcvsegmentCVE-2025-38622 A transient execution vulnerability in some AMD processors may allow an attacker to infer dat...
EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2501)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : x86/mce: Work around an erratum on fast string copy instructionsCVE-2022-49124 net: preserve skbendoffset in skbunclonekeeptruesizeCVE-2022-49142...
Linux Distros Unpatched Vulnerability : CVE-2022-50350
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: target: iscsi: Fix a race condition between loginwork and the login thread In case a malicious initiator sends some random data immediately after a login...
AZL-71155 CVE-2022-50350 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix a race condition between loginwork and the login thread In case a malicious initiator sends some random data immediately after a login PDU; the iscsitargetskdataready callback will schedule the loginwork...
Linux Distros Unpatched Vulnerability : CVE-2023-52974
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: iscsitcp: Fix UAF during login when accessing the shost ipaddress If during iscsiswtcpsessioncreate iscsitcpr2tpoolalloc fails, userspace could be accessi...
SUSE CVE-2011-0001
Double free vulnerability in the iscsirxhandler function usr/iscsi/iscsid.c in the tgt daemon tgtd in Linux SCSI target framework tgt before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via...
SUSE SLES15 Security Update : open-iscsi (SUSE-SU-2021:1164-1)
This update for open-iscsi fixes the following issues : CVE-2020-17437: uIP Out-of-Bounds Write bsc1179908 CVE-2020-17438: uIP Out-of-Bounds Write bsc1179908 CVE-2020-13987: uIP Out-of-Bounds Read bsc1179908 CVE-2020-13988: uIP Integer Overflow bsc1179908 Enabled no-wait '-W' iscsiadm option for...
CVE-2011-0001
Double free vulnerability in the iscsirxhandler function usr/iscsi/iscsid.c in the tgt daemon tgtd in Linux SCSI target framework tgt before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via...
CVE-2011-0001
CVE-2011-0001 affects the Linux SCSI Target Framework (tgt) tgtd daemon prior to version 1.0.14 (scsi-target-utils). The vulnerability is a double-free in iscsi_rx_handler (usr/iscsi/iscsid.c) that can cause memory corruption and a crash; remote attackers may trigger this via network/blob-related...
CVE-2011-0001
Double free vulnerability in the iscsirxhandler function usr/iscsi/iscsid.c in the tgt daemon tgtd in Linux SCSI target framework tgt before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via...
CVE-2011-0001
Double free vulnerability in the iscsirxhandler function usr/iscsi/iscsid.c in the tgt daemon tgtd in Linux SCSI target framework tgt before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via...
CVE-2011-0001
Double free vulnerability in the iscsirxhandler function usr/iscsi/iscsid.c in the tgt daemon tgtd in Linux SCSI target framework tgt before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via...
scsi-target-utils: double-free vulnerability leads to pre-authenticated crash
Double free vulnerability in the iscsirxhandler function usr/iscsi/iscsid.c in the tgt daemon tgtd in Linux SCSI target framework tgt before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via...
