CVEvulnerability

CVE-2013-2850

7.9 HIGH Published 2013-06-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-06-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.9 HIGH — AV:A/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service (memory corruption and OOPS) or possibly execute arbitrary code via a long key that is not properly handled during construction of an error-response packet.

Affected configurations

• linux linux kernel (>= 3.1 < 3.2.47) • linux linux kernel (>= 3.3 < 3.4.48) • linux linux kernel (>= 3.5 < 3.9.5)

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References