Lucene search
Veracode Vulnerability DatabaseVERACODE:6290HistoryMay 14, 2018 - 8:16 a.m.
Arbitrary Code Execution
2018-05-1408:16:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.0004 Low
EPSS
Percentile
5.1%
libiscsi.so is vulnerable to arbitrary code execution. The library is missing several length validations, allowing a malicious user to locally send messages with incorrect lengths to cause a buffer overflow that can result in arbitrary code being executed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libiscsi.so | le | 1.0.10700 |
Related
redhatcve
redhatcve
CVE-2017-17840
2017-12-26 22:19:37
nessus
nessus
RHEL 6 : iscsi-initiator-utils (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : iscsi-initiator-utils (Unpatched Vulnerability)
2024-05-11 00:00:00
EulerOS 2.0 SP3 : iscsi-initiator-utils (EulerOS-SA-2019-2596)
2019-12-18 00:00:00
osv
osv
CVE-2017-17840
2017-12-27 17:08:19
prion
prion
Buffer overflow
2017-12-27 17:08:00
debiancve
debiancve
CVE-2017-17840
2022-10-03 16:23:20
openvas
openvas
nvd
nvd
CVE-2017-17840
2017-12-27 17:08:19
cvelist
cvelist
CVE-2017-17840
2022-10-03 16:23:20
cve
cve
CVE-2017-17840
2022-10-03 16:23:20
ubuntucve
ubuntucve
CVE-2017-17840
2017-12-27 00:00:00