Linux Kernel iscsi_add_notunderstood_response Heap Buffer Overflow (CVE-2013-2850)

A heap buffer overflow vulnerability has been reported in the Linux Kernel. The vulnerability is in the iscsiaddnotunderstoodresponse function in the iscsitarget driver and is due to the way a notunderstood response is created after processing very long keys. A remote, unauthenticated attacker ca...

CVE-2013-2850: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the iscsiaddnotunderstoodresponse function in drivers/target/iscsi/iscsitargetparameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service memory corruption and OOPS or possibly execute arbitrary co...