OESA-2026-3512

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3512

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-3512.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-3512

Upstream

CVE-2026-18724

Published

2026-08-30T04:14:35Z

Modified

2026-08-30T04:32:36.289132897Z

Severity

7.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H CVSS Calculator

Summary

open-iscsi security update

Details

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.

Security Fix(es):

A stack buffer overflow vulnerability exists in the idbmrecinfoconfig() function in open-iscsi (iscsi-initiator-utils). An attacker can craft a malicious SendTargets TargetName containing newline characters and oversized injected keys or values to inject extra configuration lines into persisted node records. When the record is reparsed, due to missing bounds checking, a stack buffer overflow occurs, leading to denial of service or potential memory corruption. The affected component is usr/idbm.c:idbmrecinfoconfig in iscsi-initiator-utils, with attacker-controlled input reaching it through SendTargets handling in usr/discovery.c.(CVE-2026-18724)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:22.03-LTS-SP4 / open-iscsi

Package

Name: open-iscsi
Purl: pkg:rpm/openEuler/open-iscsi&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.5-18.oe2203sp4

Ecosystem specific

{
    "x86_64": [
        "open-iscsi-2.1.5-18.oe2203sp4.x86_64.rpm",
        "open-iscsi-debuginfo-2.1.5-18.oe2203sp4.x86_64.rpm",
        "open-iscsi-debugsource-2.1.5-18.oe2203sp4.x86_64.rpm",
        "open-iscsi-devel-2.1.5-18.oe2203sp4.x86_64.rpm",
        "open-iscsi-help-2.1.5-18.oe2203sp4.x86_64.rpm"
    ],
    "aarch64": [
        "open-iscsi-2.1.5-18.oe2203sp4.aarch64.rpm",
        "open-iscsi-debuginfo-2.1.5-18.oe2203sp4.aarch64.rpm",
        "open-iscsi-debugsource-2.1.5-18.oe2203sp4.aarch64.rpm",
        "open-iscsi-devel-2.1.5-18.oe2203sp4.aarch64.rpm",
        "open-iscsi-help-2.1.5-18.oe2203sp4.aarch64.rpm"
    ],
    "src": [
        "open-iscsi-2.1.5-18.oe2203sp4.src.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-3512.json"