← Back

CVE-2013-2850

nvd nist
Published: Jun 7, 2013Modified: Apr 29, 2026

JSON object

Loading...
7.9
Vector
AV:A/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 5.5 / Impact: 10.0
Source: NVD

Description

Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service (memory corruption and OOPS) or possibly execute arbitrary code via a long key that is not properly handled during construction of an error-response packet.

Affected (3)

Products: Linux: Linux Kernel
1 product
Linux Kernel
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Linux
From 3.1 to 3.2.47
From 3.3 to 3.4.48
From 3.5 to 3.9.5

References (24)

Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: chrome-cve-admin@google.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.