AZL-111395

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111395.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-111395
Upstream
  • CVE-2026-115484
Published
2026-10-23T01:16:53Z
Modified
2026-10-30T05:35:37Z
Summary
CVE-2026-115484 affecting package iscsi-initiator-utils 2.1.12-1
Details

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the daemon or corrupt its network configuration.

References

Affected packages

Azure Linux:3 / iscsi-initiator-utils

Package

Name
iscsi-initiator-utils
Purl
pkg:rpm/azure-linux/iscsi-initiator-utils

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
2.1.12-1

Database specific

source 
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111395.json"