CVE-2011-0001 Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote attack...
MediumCVSS 5.0
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown vectors related to a buffer overflow during iscsi login. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zaal tgt | <= 1.0.13 | No fix listed |
| zaal tgt | = 0.9.5 | No fix listed |
| zaal tgt | = 1.0.0 | No fix listed |
| zaal tgt | = 1.0.1 | No fix listed |
| zaal tgt | = 1.0.2 | No fix listed |
| zaal tgt | = 1.0.3 | No fix listed |
| zaal tgt | = 1.0.4 | No fix listed |
| zaal tgt | = 1.0.5 | No fix listed |
| zaal tgt | = 1.0.6 | No fix listed |
| zaal tgt | = 1.0.7 | No fix listed |
| zaal tgt | = 1.0.8 | No fix listed |
| zaal tgt | = 1.0.9 | No fix listed |
| zaal tgt | = 1.0.10 | No fix listed |
| zaal tgt | = 1.0.11 | No fix listed |
| zaal tgt | = 1.0.12 | No fix listed |
| debian/tgt(Debian:12) | < 1:1.0.4-3 | 1:1.0.4-3 |
| debian/tgt(Debian:13) | < 1:1.0.4-3 | 1:1.0.4-3 |
| debian/tgt(Debian:14) | < 1:1.0.4-3 | 1:1.0.4-3 |
References
- SUSE-SR:2011:009 vendor-advisory
- [stgt] 20110309 [PATCH] iscsi: fix buffer overflow before login mailing-list patch
- 43706 third-party-advisory vendor-advisory
- 43713 third-party-advisory vendor-advisory
- DSA-2209 vendor-advisory
- RHSA-2011:0332 vendor-advisory
- 46817 vdb-entry
- 1025184 vdb-entry
- ADV-2011-0636 vdb-entry vendor-advisory
- bugzilla.redhat.com patch
- bugzilla.redhat.com patch
- lstf-iscsirxhandler-dos(66010) vdb-entry
- Debian Security Tracker CVE-2011-0001 vendor-advisory