Buffer overflow in Arne Redlich \& Ross Walker Iscsitarget
CVE-2010-2221
Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.
Vulnerability class: Buffer Overflow
EPSS: 0.053 (91.8th percentile) — read the EPSS interpretation.
Affected products
- Arne_redlich_\&_ross_walker Iscsitarget — versions 0.3.2, 0.3.4, 0.4.5
- Linux Linux_kernel
- Vladislav_bolkhovitin Generic_scsi_target_subsystem — versions 1.0.0, 0.9.5.2, 0.9.0a
- Zaal Tgt — versions 1.0.1, 1.0.0, 0.9.5
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
- secalert@redhat.com (vdb-entry, x_refsource_VUPEN)
- secalert@redhat.com (mailing-list, x_refsource_FULLDISC)
- secalert@redhat.com (x_refsource_OSVDB, vdb-entry)
- secalert@redhat.com (vendor-advisory, x_refsource_MANDRIVA)
- secalert@redhat.com (x_refsource_OSVDB, vdb-entry)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_OSVDB, vdb-entry)