Ubuntu.comUB:CVE-2011-0001CVE-2011-0001
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
Percentile
95.4%
Double free vulnerability in the iscsi_rx_handler function
(usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target
framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote
attackers to cause a denial of service (memory corruption and crash) and
possibly execute arbitrary code via unknown vectors related to a buffer
overflow during iscsi login. NOTE: some of these details are obtained from
third party information.
Notes
| Author | Note |
|---|---|
| mdeslaur | actually got fixed in 1.0.15 |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.10 | noarch | tgt | < 1:1.0.4-1ubuntu4.1 | UNKNOWN |
| ubuntu | 11.04 | noarch | tgt | < 1:1.0.13-0ubuntu2.1 | UNKNOWN |
| ubuntu | 11.10 | noarch | tgt | < 1:1.0.13-0ubuntu3 | UNKNOWN |
| ubuntu | 12.04 | noarch | tgt | < 1:1.0.13-0ubuntu3 | UNKNOWN |
| ubuntu | 12.10 | noarch | tgt | < 1:1.0.13-0ubuntu3 | UNKNOWN |
| ubuntu | 13.04 | noarch | tgt | < 1:1.0.13-0ubuntu3 | UNKNOWN |
| ubuntu | 13.10 | noarch | tgt | < 1:1.0.13-0ubuntu3 | UNKNOWN |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
Percentile
95.4%