211 matches found
advisories
LinnemanLabs Research and Advisories Security research, advisories, and proof-of-concept code from LinnemanLabs. Advisories and Research Links to write-ups, disclosures, and reproducible PoCs. Project| Findings / Techniques| CVEs| Result| Write-up| PoC ---|---|---|---|---|--- bluez| ?| ?| LPE to...
Updated open-isns package fixes a security vulnerability
Double-free in the iSNS attribute decoder in open-iscsi. CVE-2026-55995...
CVE-2026-19735
The RFC 6528 initial-sequence-number implementation in subsys/net/ip/tcp.c derived every TCP ISN from SHA-256uniquekey || four-tuple plus a uptime-derived offset, where uniquekey is a 128-bit secret filled once by syscsrandget. The return value of that call was discarded and the once guard was...
Rocky Linux 9 [CIQ] Security Update: isns-utils / isns-utils-debuginfo / isns-utils-debugsource / etc (crlsa-2026_53847)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202653847 advisory. open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder CVE-2026-55995 Tenable has extracted the preceding description block directly fr...
Rocky Linux 8 [CIQ] Security Update: isns-utils / isns-utils-debuginfo / isns-utils-debugsource / etc (crlsa-2026_53848)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202653848 advisory. open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder CVE-2026-55995 Tenable has extracted the preceding description block directly fr...
Rocky Linux 10.2 [CIQ] Security Update: isns-utils / isns-utils-debuginfo / isns-utils-debugsource / etc (crlsa-2026_53846)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202653846 advisory. open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder CVE-2026-55995 Tenable has extracted the preceding description block directly...
Rocky Linux 9.2 [CIQ] Security Update: isns-utils / isns-utils-libs (ciqsa-2026_1506)
The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261506 advisory. This advisory aggregates security fixes for the isns-utils SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2026-55995. Tenable has extracted the preceding descriptio...
Rocky Linux 9.6 [CIQ] Security Update: isns-utils / isns-utils-libs (ciqsa-2026_1505)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261505 advisory. This advisory aggregates security fixes for the isns-utils SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-55995. Tenable has extracted the preceding descriptio...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Open-iSNS vulnerability (USN-8807-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8807-1 advisory. It was discovered that Open-iSNS contained a double-free vulnerability when decoding malformed iSNS attributes. An...
USN-8807-1 Open-iSNS vulnerability
It was discovered that Open-iSNS contained a double-free vulnerability when decoding malformed iSNS attributes. An unauthenticated attacker could possibly use this to cause a denial of service...
USN-8807-1: Open-iSNS vulnerability
It was discovered that Open-iSNS contained a double-free vulnerability when decoding malformed iSNS attributes. An unauthenticated attacker could possibly use this to cause a denial of service...
Internet Storage Name Service Information Disclosure Vulnerability
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...
Alibaba Cloud Linux 3 : 0260: isns-utils (ALINUX3-SA-2026:0260)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0260 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-55995: A Double Free vulnerability in...
RHSA-2026:61249 Red Hat Security Advisory: isns-utils security update
Bulletin has no description...
Important: Red Hat Security Advisory: isns-utils security update
An update for isns-utils is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder
A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...
RHEL 8 : isns-utils (RHSA-2026:61249)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61249 advisory. The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allows...
RHSA-2026:60385 Red Hat Security Advisory: isns-utils security update
Bulletin has no description...