Description Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.
Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration Affected Products Product Versions zaal tgt <= 1.0.5
0.9.5
1.0.0
1.0.1
1.0.2
Viewing 5 of 7 versions. View all CPE cpe:2.3:a:zaal:tgt:*:*:*:*:*:*:*:* cpe:2.3:a:zaal:tgt:0.9.5:*:*:*:*:*:*:* cpe:2.3:a:zaal:tgt:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:zaal:tgt:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:zaal:tgt:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:zaal:tgt:1.0.3:*:*:*:*:*:*:* cpe:2.3:a:zaal:tgt:1.0.4:*:*:*:*:*:*:* Remediation No remediation found in references. linux linux kernel All versions
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Remediation No remediation found in references. arne redlich & ross walker iscsitarget <= 1.4.20
0.1.0
0.2.0
0.2.1
0.2.2
0.2.3
0.2.4
0.2.5
0.2.6
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.3.6
0.3.7
0.3.8
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.4.10
0.4.11
0.4.12
0.4.13
0.4.14
0.4.15
0.4.16
0.4.17
1.4.18
1.4.19
Viewing 5 of 38 versions. View all CPE cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:*:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.1.0:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.2.0:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.2.1:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.2.2:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.2.3:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.2.4:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.2.5:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.2.6:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.3.0:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.3.1:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.3.2:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.3.3:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.3.4:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.3.5:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.3.6:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.3.7:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.3.8:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.0:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.1:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.2:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.3:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.4:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.5:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.6:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.7:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.8:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.9:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.10:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.11:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.12:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.13:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.14:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.15:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.16:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:0.4.17:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:1.4.18:*:*:*:*:*:*:* cpe:2.3:a:arne_redlich_&_ross_walker:iscsitarget:1.4.19:*:*:*:*:*:*:* Remediation No remediation found in references. vladislav bolkhovitin generic scsi target subsystem <= 1.0.1
0.9.0a
0.9.1
0.9.2
0.9.3
0.9.3 pre1
0.9.3 pre2
0.9.3 pre4
0.9.4
0.9.5
0.9.5.1
0.9.5.2
1.0.0
Viewing 5 of 13 versions. View all CPE cpe:2.3:a:vladislav_bolkhovitin:generic_scsi_target_subsystem:*:*:*:*:*:*:*:* cpe:2.3:a:vladislav_bolkhovitin:generic_scsi_target_subsystem:0.9.0a:*:*:*:*:*:*:* cpe:2.3:a:vladislav_bolkhovitin:generic_scsi_target_subsystem:0.9.1:*:*:*:*:*:*:* cpe:2.3:a:vladislav_bolkhovitin:generic_scsi_target_subsystem:0.9.2:*:*:*:*:*:*:* cpe:2.3:a:vladislav_bolkhovitin:generic_scsi_target_subsystem:0.9.3:*:*:*:*:*:*:* cpe:2.3:a:vladislav_bolkhovitin:generic_scsi_target_subsystem:0.9.3:pre1:*:*:*:*:*:* cpe:2.3:a:vladislav_bolkhovitin:generic_scsi_target_subsystem:0.9.3:pre2:*:*:*:*:*:* cpe:2.3:a:vladislav_bolkhovitin:generic_scsi_target_subsystem:0.9.3:pre4:*:*:*:*:*:* cpe:2.3:a:vladislav_bolkhovitin:generic_scsi_target_subsystem:0.9.4:*:*:*:*:*:*:* cpe:2.3:a:vladislav_bolkhovitin:generic_scsi_target_subsystem:0.9.5:*:*:*:*:*:*:* cpe:2.3:a:vladislav_bolkhovitin:generic_scsi_target_subsystem:0.9.5.1:*:*:*:*:*:*:* cpe:2.3:a:vladislav_bolkhovitin:generic_scsi_target_subsystem:0.9.5.2:*:*:*:*:*:*:* cpe:2.3:a:vladislav_bolkhovitin:generic_scsi_target_subsystem:1.0.0:*:*:*:*:*:*:* Remediation No remediation found in references.
Change History 7 change records found show changes