CVEvulnerability

CVE-2026-115484

7.6 HIGH Published 2026-10-23 Modified 2026-10-29 Official page ↗
Status
Awaiting Analysis
Published
2026-10-23
Last modified
2026-10-29
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.6 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Weaknesses
CWE-125

Description

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the daemon or corrupt its network configuration.

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References