CVE-2026-115484

Published: Oct 23, 2026Modified: Oct 23, 2026

7.6

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Exploitability: 2.8 / Impact: 4.7

Source: secalert@redhat.com

Description

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the daemon or corrupt its network configuration.

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://access.redhat.com/security/cve/CVE-2026-115484

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2556265

Source: secalert@redhat.com

Timeline

No history available yet.