NVD

Id
13705  
Name
CVE-2010-2221  
Description
Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-07-08  
Modified Date
2010-09-30  
Seq
2010-2221  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
76103 13705 CVE-2010-2221 20100702 TELUS Security Labs VR - iSCSI target Multiple Implementations iSNS Stack Buffer Overflow  View
76104 13705 CVE-2010-2221 20100702 TELUS Security Labs VR - iSCSI target Multiple Implementations iSNS Stack Buffer Overflow  View
76105 13705 CVE-2010-2221 SUSE-SR:2010:017  View
76106 13705 CVE-2010-2221 [stgt] 20100701 1.0.6 released  View
76107 13705 CVE-2010-2221 http://scst.svn.sourceforge.net/viewvc/scst/trunk/iscsi-scst/usr/isns.c?r1=1793&r2=1792&pathrev=1793  View
76108 13705 CVE-2010-2221 http://scst.svn.sourceforge.net/viewvc/scst?view=revision&revision=1793  View
76109 13705 CVE-2010-2221 [iscsitarget-devel] 20100701 [patch] fix iSNS bounds checking  View
76110 13705 CVE-2010-2221 MDVSA-2010:131  View
76111 13705 CVE-2010-2221 RHSA-2010:0518  View
76112 13705 CVE-2010-2221 41327  View
76113 13705 CVE-2010-2221 1024175  View
76114 13705 CVE-2010-2221 ADV-2010-1760  View
76115 13705 CVE-2010-2221 ADV-2010-1786  View
76116 13705 CVE-2010-2221 https://bugzilla.redhat.com/show_bug.cgi?id=593877  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35954 JVNDB-2010-001734 iSNS 実装におけるバッファーオーバーフローの脆弱性 Linux SCSI target framework、iSCSI Enterprise Target および Generic SCSI Target Subsystem の isns.c 内にある iSNS 実装には、バッファーオーバーフローの脆弱性が存在します。 CVE-2010-2221 44801 CVE-2010-2221 13705 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001734.html 2010-07-08 2010-07-28 View