An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which (due to lack of checking) can lead to buffer overflows, and result in aborts (with overflow checking enabled) or code execution. The process_iscsid_broadcast function in iscsiuio/src/unix/iscsid_ipc.c does not validate the payload length before a write operation.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - iscsi-initiator-utils: Heap-based buffer overflow in process_iscsid_broadcast() (CVE-2017-17840)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - iscsi-initiator-utils: Heap-based buffer overflow in process_iscsid_broadcast() (CVE-2017-17840)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - iscsi-initiator-utils: Heap-based buffer overflow in process_iscsid_broadcast() (CVE-2017-17840)

  - An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP     TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in     net/ipv4/uip.c. (CVE-2020-13987)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - iscsi-initiator-utils: Heap-based buffer overflow in process_iscsid_broadcast() (CVE-2017-17840)

  - An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP     TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in     net/ipv4/uip.c. (CVE-2020-13987)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the iscsi-initiator-utils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to     abort or potentially execute code by sending messages with incorrect lengths, which (due to lack of     checking) can lead to buffer overflows, and result in aborts (with overflow checking enabled) or code     execution. The process_iscsid_broadcast function in iscsiuio/src/unix/iscsid_ipc.c does not validate the     payload length before a write operation. (CVE-2017-17840)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the iscsi-initiator-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An issue was discovered in Open-iSCSI through 2.0.875.
    A local attacker can cause the iscsiuio server to abort     or potentially execute code by sending messages with     incorrect lengths, which (due to lack of checking) can     lead to buffer overflows, and result in aborts (with     overflow checking enabled) or code execution. The     process_iscsid_broadcast function in     iscsiuio/src/unix/iscsid_ipc.c does not validate the     payload length before a write     operation.(CVE-2017-17840)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
198735	RHEL 6 : iscsi-initiator-utils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198722	RHEL 5 : iscsi-initiator-utils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198709	RHEL 7 : iscsi-initiator-utils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198708	RHEL 8 : iscsi-initiator-utils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
188663	EulerOS Virtualization 3.0.6.6 : iscsi-initiator-utils (EulerOS-SA-2023-3399)	Nessus	Huawei Local Security Checks	high
132131	EulerOS 2.0 SP3 : iscsi-initiator-utils (EulerOS-SA-2019-2596)	Nessus	Huawei Local Security Checks	high

Detections

Analytics

CVE-2017-17840

high

Tenable Plugins

high

high

high

high

high

high