CVE:CVE-2010-2221
CNNVD:CNNVD-201007-059
Open-iSCSI targetcli-fb是一款用于管理Linux LIO内核目标的命令行界面。
Open-iSCSI targetcli-fb存在缓冲区错误漏洞。远程攻击者可以借助无效的PDU导致服务拒绝(内存破坏和后台程序崩溃)。
solution:Upgrade zaal tgt to a higher version than 1.0.5,0.9.5,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,and avoid the version (,1.0.5],0.9.5,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4; Upgrade arne_redlich_&_ross_walker iscsitarget to a higher version than 1.4.20,0.1.0,0.2.0,0.2.1,0.2.2,0.2.3,0.2.4,0.2.5,0.2.6,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.3.6,0.3.7,0.3.8,0.4.0,0.4.1,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.4.9,0.4.10,0.4.11,0.4.12,0.4.13,0.4.14,0.4.15,0.4.16,0.4.17,1.4.18,1.4.19,and avoid the version (,1.4.20],0.1.0,0.2.0,0.2.1,0.2.2,0.2.3,0.2.4,0.2.5,0.2.6,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.3.6,0.3.7,0.3.8,0.4.0,0.4.1,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.4.9,0.4.10,0.4.11,0.4.12,0.4.13,0.4.14,0.4.15,0.4.16,0.4.17,1.4.18,1.4.19; Upgrade vladislav_bolkhovitin generic_scsi_target_subsystem to a higher version than 1.0.1,0.9.0a,0.9.1,0.9.2,0.9.3,0.9.3:pre1,0.9.3:pre2,0.9.3:pre4,0.9.4,0.9.5,0.9.5.1,0.9.5.2,1.0.0,and avoid the version (,1.0.1],0.9.0a,0.9.1,0.9.2,0.9.3,0.9.3:pre1,0.9.3:pre2,0.9.3:pre4,0.9.4,0.9.5,0.9.5.1,0.9.5.2,1.0.0