Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Vladislav Bolkhovitin Subscribe
Filtered by product Generic Scsi Target Subsystem
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-2221 4 Arne Redlich \& Ross Walker, Linux, Vladislav Bolkhovitin and 1 more 4 Iscsitarget, Linux Kernel, Generic Scsi Target Subsystem and 1 more 2023-02-12 5.0 MEDIUM N/A
Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.