Oval Definition:	oval:org.opensuse.security:def:201717840
Revision Date: 2022-09-02 Version: 1 Title: CVE-2017-17840 Description: An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which (due to lack of checking) can lead to buffer overflows, and result in aborts (with overflow checking enabled) or code execution. The process_iscsid_broadcast function in iscsiuio/src/unix/iscsid_ipc.c does not validate the payload length before a write operation. Family: unix Class: vulnerability Status: Reference(s): Mitre CVE-2017-17840 SUSE CVE-2017-17840 Platform(s): SUSE CaaS Platform 4.5 SUSE Enterprise Storage 7 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 Product(s): Definition Synopsis Release Information SUSE CaaS Platform 4.5 is installed AND open-iscsi is not affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed AND iscsiuio is not affected OR libopeniscsiusr0_2_0 is not affected OR open-iscsi is not affected OR open-iscsi-devel is not affected Definition Synopsis Release Information SUSE Linux Enterprise Real Time 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Manager Proxy 4.1 is installed OR SUSE Manager Retail Branch Server 4.1 is installed OR SUSE Manager Server 4.1 is installed AND Package Information iscsiuio is not affected OR libopeniscsiusr0_2_0 is not affected OR open-iscsi is not affected OR open-iscsi-devel is not affected Definition Synopsis Release Information SUSE Enterprise Storage 7 is installed OR SUSE Linux Enterprise Real Time 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed AND Package Information iscsiuio is not affected OR libopeniscsiusr0_2_0 is not affected OR open-iscsi is not affected OR open-iscsi-devel is not affected Definition Synopsis SUSE Linux Enterprise Micro 5.0 is installed AND open-iscsi is not affected Definition Synopsis Release Information SUSE Linux Enterprise Real Time 15 SP2 is installed AND open-iscsi is not affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed AND iscsiuio is not affected OR libopeniscsiusr0_2_0 is not affected OR open-iscsi is not affected OR open-iscsi-devel is not affected
BACK