Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service (memory corruption and OOPS) or possibly execute arbitrary code via a long key that is not properly handled during construction of an error-response packet.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Jun 7, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 7, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jun 7, 2013 |
| Suse | — | Upgrade kernel-pae-extraUpgrade ocfs2-kmp-xenUpgrade kernel-debug-develUpgrade kernel-default-base-debuginfoUpgrade kernel-default-devel-debuginfoUpgrade xen-kmp-paeUpgrade kernel-trace-develUpgrade gfs2-kmp-ppc64Upgrade gfs2-kmp-defaultUpgrade kernel-trace-extraUpgrade cluster-network-kmp-xenUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_trace-develUpgrade kernel-default-baseUpgrade kernel-desktop-develUpgrade kernel-vanilla-devel-debuginfoUpgrade kernel-vanilla-base-debuginfoUpgrade kernel-ec2-baseUpgrade kernel-ec2-extraUpgrade cluster-network-kmp-rtUpgrade kernel-desktop-debuginfoUpgrade kernel-default-debuginfoUpgrade kernel-ec2-develUpgrade xen-kmp-defaultUpgrade ocfs2-kmp-rt_traceUpgrade kernel-trace-base-debuginfoUpgrade kernel-vanilla-debugsourceUpgrade lttng-modules-kmp-rt_traceUpgrade ofed-kmp-rt_traceUpgrade kernel-trace-debuginfoUpgrade kernel-develUpgrade kernel-pae-base-debuginfoUpgrade cluster-network-kmp-paeUpgrade kernel-trace-baseUpgrade kernel-trace-debugsourceUpgrade gfs2-kmp-xenUpgrade kernel-debug-base-debuginfoUpgrade kernel-defaultUpgrade iscsitarget-kmp-rt_traceUpgrade kernel-docsUpgrade ocfs2-kmp-traceUpgrade kernel-debug-devel-debuginfoUpgrade ofed-kmp-rtUpgrade kernel-ec2Upgrade kernel-ec2-extra-debuginfoUpgrade ocfs2-kmp-ppc64Upgrade kernel-ppc64-baseUpgrade kernel-debug-debugsourceUpgrade kernel-debugUpgrade kernel-xen-base-debuginfoUpgrade kernel-xen-devel-debuginfoUpgrade cluster-network-kmp-rt_traceUpgrade kernel-source-rtUpgrade cluster-network-kmp-ppc64Upgrade kernel-source-vanillaUpgrade kernel-pae-develUpgrade kernel-vanilla-debuginfoUpgrade kernel-rt_traceUpgrade iscsitarget-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rt-baseUpgrade drbd-kmp-rtUpgrade kernel-ec2-devel-debuginfoUpgrade kernel-xen-baseUpgrade kernel-default-extraUpgrade drbd-kmp-rt_traceUpgrade kernel-paeUpgrade kernel-default-debugsourceUpgrade kernel-ec2-base-debuginfoUpgrade kernel-desktopUpgrade kernel-desktop-debugsourceUpgrade gfs2-kmp-paeUpgrade kernel-rt_trace-baseUpgrade kernel-pae-baseUpgrade kernel-vanilla-develUpgrade kernel-rtUpgrade kernel-vanillaUpgrade kernel-symsUpgrade ocfs2-kmp-paeUpgrade kernel-default-develUpgrade kernel-pae-debugsourceUpgrade kernel-xen-develUpgrade kernel-pae-devel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-ec2-debuginfoUpgrade kernel-vanilla-baseUpgrade cluster-network-kmp-traceUpgrade kernel-debug-baseUpgrade kernel-pae-debuginfoUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-desktop-baseUpgrade kernel-xenUpgrade lttng-modules-kmp-rtUpgrade kernel-traceUpgrade kernel-ppc64Upgrade gfs2-kmp-traceUpgrade kernel-desktop-base-debuginfoUpgrade kernel-ec2-debugsourceUpgrade kernel-desktop-devel-debuginfoUpgrade kernel-xen-debugsourceUpgrade kernel-ppc64-develUpgrade kernel-xen-extraUpgrade sle-hae-releaseUpgrade kernel-xen-debuginfoUpgrade cluster-network-kmp-defaultUpgrade kernel-syms-rtUpgrade xen-kmp-traceUpgrade kernel-trace-devel-debuginfoUpgrade kernel-sourceUpgrade kernel-default-man | Feb 17, 2015 | Jun 7, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-45-highbankUpgrade linux-image-3.5.0-32-genericUpgrade linux-image-3.2.0-45-powerpc-smpUpgrade linux-image-3.2.0-1433-omap4Upgrade linux-image-3.2.0-45-genericUpgrade linux-image-3.2.0-45-virtualUpgrade linux-image-3.5.0-32-highbankUpgrade linux-image-3.2.0-45-omapUpgrade linux-image-3.5.0-32-powerpc64-smpUpgrade linux-image-3.2.0-45-powerpc64-smpUpgrade linux-image-3.2.0-45-generic-paeUpgrade linux-image-3.5.0-226-omap4Upgrade linux-image-3.5.0-32-powerpc-smpUpgrade linux-image-3.5.0-32-omapUpgrade linux-image-3.8.0-23-generic | Nov 8, 2024 | Jun 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub