DLA-3976-1 tgt - security update
Published
Unknown
Product
debian/tgt vulnerabilities
5 published CVES affecting debian/tgt, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 5
- Critical
- 0
- High
- 0
- Medium
- 3
- Low
- 0
- Unscored
- 2
- CISA KEV
- 0
Latest debian/tgt CVEs
Newest publication first
-
-
MediumCVSS 5.9 EPSS 0.55%
tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical.
-
DSA-2209-1 tgt - double free
PublishedUnknown -
MediumCVSS 5.0 EPSS 5.1%
Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service (memory corruption and crash) and possibly exec...
-
MediumCVSS 5.0 EPSS 3.4%
Multiple format string vulnerabilities in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) 1.0.3, 0.9.5, and earlier and (2) iSCSI Enterprise Target (aka iscsitarget) 0.4.16 allow remote attackers to cause a denial of service (tgtd daemon crash) or possibl...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.