OESA-2022-1757

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1757
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2022-1757.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2022-1757
Upstream
Published
2022-07-22T11:03:59Z
Modified
2025-09-03T06:17:01.425181Z
Summary
Open-iSCSI security update
Details

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.

Security Fix(es):

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c.(CVE-2020-17437)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / Open-iSCSI

Package

Name
Open-iSCSI
Purl
pkg:rpm/openEuler/Open-iSCSI&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
open-iscsi-2.1.1-11.oe1

Ecosystem specific 

{
    "aarch64": [
        "open-iscsi-2.1.1-11.oe1.aarch64.rpm",
        "open-iscsi-debuginfo-2.1.1-11.oe1.aarch64.rpm",
        "open-iscsi-debugsource-2.1.1-11.oe1.aarch64.rpm",
        "open-iscsi-devel-2.1.1-11.oe1.aarch64.rpm",
        "open-iscsi-help-2.1.1-11.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "open-iscsi-2.1.1-11.oe1.x86_64.rpm",
        "open-iscsi-debuginfo-2.1.1-11.oe1.x86_64.rpm",
        "open-iscsi-debugsource-2.1.1-11.oe1.x86_64.rpm",
        "open-iscsi-devel-2.1.1-11.oe1.x86_64.rpm",
        "open-iscsi-help-2.1.1-11.oe1.x86_64.rpm"
    ],
    "src": [
        "open-iscsi-2.1.1-11.oe1.src.rpm"
    ]
}