This update for open-iscsi fixes the following issues :

CVE-2020-17437: uIP Out-of-Bounds Write (bsc#1179908)

CVE-2020-17438: uIP Out-of-Bounds Write (bsc#1179908)

CVE-2020-13987: uIP Out-of-Bounds Read (bsc#1179908)

CVE-2020-13988: uIP Integer Overflow (bsc#1179908)

Enabled no-wait ('-W') iscsiadm option for iscsi login service (bsc#1173886, bsc#1183421)

Added the ability to perform async logins (bsc#1173886)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLES15 Security Update : open-iscsi (SUSE-SU-2021:1164-1)

critical Nessus Plugin ID 148504

Version 1.4

Version 1.3

Version 1.3

Version 1.4 Jan 4, 2024, 3:23 PM CVSSv2 score source (set to "CVE-2020-17438") Plugin Feed: 202401041523
Version 1.3 Dec 6, 2022, 1:01 AM Reference Plugin Feed: 202212060101
Version 1.3 Jan 4, 2024, 1:31 PM CVSSv2 score source (set to "CVE-2020-17438") Plugin Feed: 202401041331