AZL-111392
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111392.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-111392
- Upstream
- CVE-2026-115486
- Published
- 2026-10-23T01:16:53Z
- Modified
- 2026-10-30T05:35:37Z
- Summary
- CVE-2026-115486 affecting package iscsi-initiator-utils 2.1.12-1
- Details
-
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP table is updated unconditionally with attacker-controlled addresses from the packet headers. An attacker on the same network segment can send a minimal Neighbor Advertisement to poison the ARP table and redirect network traffic.
- References