Arbitrary Code Execution

libiscsi.so is vulnerable to arbitrary code execution. The library is missing several length validations, allowing a malicious user to locally send messages with incorrect lengths to cause a buffer overflow that can result in arbitrary code being executed...