CVE-2013-20004

2022-02-0620:18:56

mitre

www.cve.org

starwind iscsi

denial of service

non-existent target

memory allocation

vulnerability

cve-2013-20004

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

58.3%

JSON

A flaw was found in StarWind iSCSI target. StarWind service does not limit client connections and allocates memory on each connection attempt. An attacker could create a denial of service state by trying to connect a non-existent target multiple times. This affects iSCSI SAN (Windows Native) Version 6.0, build 2013-01-16.

References

www.starwindsoftware.com/security/sw-20130215-0001/