CVE-2010-2221

Published: Jul 8, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.

Affected (58)

Products: Zaal: Tgt · Arne Redlich & Ross Walker: Iscsitarget · Vladislav Bolkhovitin: Generic Scsi Target Subsystem

Zaal

1 product

Tgt

Arne Redlich & Ross Walker

1 product

Iscsitarget

Vladislav Bolkhovitin

1 product

Generic Scsi Target Subsystem

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Zaal Tgt	Up to 1.0.5
Zaal Tgt	Version 0.9.5
Zaal Tgt	Version 1.0.0
Zaal Tgt	Version 1.0.1
Zaal Tgt	Version 1.0.2
Zaal Tgt	Version 1.0.3
Zaal Tgt	Version 1.0.4

Configuration B

38 vulnerable

Vulnerable Software	Affected Versions
Arne Redlich & Ross Walker Iscsitarget	Up to 1.4.20
Arne Redlich & Ross Walker Iscsitarget	Version 0.1.0
Arne Redlich & Ross Walker Iscsitarget	Version 0.2.0
Arne Redlich & Ross Walker Iscsitarget	Version 0.2.1
Arne Redlich & Ross Walker Iscsitarget	Version 0.2.2
Arne Redlich & Ross Walker Iscsitarget	Version 0.2.3
Arne Redlich & Ross Walker Iscsitarget	Version 0.2.4
Arne Redlich & Ross Walker Iscsitarget	Version 0.2.5
Arne Redlich & Ross Walker Iscsitarget	Version 0.2.6
Arne Redlich & Ross Walker Iscsitarget	Version 0.3.0
Arne Redlich & Ross Walker Iscsitarget	Version 0.3.1
Arne Redlich & Ross Walker Iscsitarget	Version 0.3.2
Arne Redlich & Ross Walker Iscsitarget	Version 0.3.3
Arne Redlich & Ross Walker Iscsitarget	Version 0.3.4
Arne Redlich & Ross Walker Iscsitarget	Version 0.3.5
Arne Redlich & Ross Walker Iscsitarget	Version 0.3.6
Arne Redlich & Ross Walker Iscsitarget	Version 0.3.7
Arne Redlich & Ross Walker Iscsitarget	Version 0.3.8
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.0
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.10
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.11
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.12
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.13
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.14
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.15
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.16
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.17
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.1
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.2
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.3
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.4
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.5
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.6
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.7
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.8
Arne Redlich & Ross Walker Iscsitarget	Version 0.4.9
Arne Redlich & Ross Walker Iscsitarget	Version 1.4.18
Arne Redlich & Ross Walker Iscsitarget	Version 1.4.19

Configuration C

13 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Vladislav Bolkhovitin Generic Scsi Target Subsystem	Up to 1.0.1
Vladislav Bolkhovitin Generic Scsi Target Subsystem	Version 0.9.0a
Vladislav Bolkhovitin Generic Scsi Target Subsystem	Version 0.9.1
Vladislav Bolkhovitin Generic Scsi Target Subsystem	Version 0.9.2
Vladislav Bolkhovitin Generic Scsi Target Subsystem	Version 0.9.3
Vladislav Bolkhovitin Generic Scsi Target Subsystem	Version 0.9.3 pre1
Vladislav Bolkhovitin Generic Scsi Target Subsystem	Version 0.9.3 pre2
Vladislav Bolkhovitin Generic Scsi Target Subsystem	Version 0.9.3 pre4
Vladislav Bolkhovitin Generic Scsi Target Subsystem	Version 0.9.4
Vladislav Bolkhovitin Generic Scsi Target Subsystem	Version 0.9.5.1
Vladislav Bolkhovitin Generic Scsi Target Subsystem	Version 0.9.5.2
Vladislav Bolkhovitin Generic Scsi Target Subsystem	Version 0.9.5
Vladislav Bolkhovitin Generic Scsi Target Subsystem	Version 1.0.0