An update for open-iscsi is now available for openEuler-24.03-LTS-SP1 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-3513 Final 1.0 1.0 2026-08-30 Initial 2026-08-30 2026-08-30 openEuler SA Tool V1.0 2026-08-30 open-iscsi security update An update for open-iscsi is now available for openEuler-24.03-LTS-SP1 The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI. Security Fix(es): A stack buffer overflow vulnerability exists in the idbm_recinfo_config() function in open-iscsi (iscsi-initiator-utils). An attacker can craft a malicious SendTargets TargetName containing newline characters and oversized injected keys or values to inject extra configuration lines into persisted node records. When the record is reparsed, due to missing bounds checking, a stack buffer overflow occurs, leading to denial of service or potential memory corruption. The affected component is usr/idbm.c:idbm_recinfo_config in iscsi-initiator-utils, with attacker-controlled input reaching it through SendTargets handling in usr/discovery.c.(CVE-2026-18724) An update for open-iscsi is now available for openEuler-24.03-LTS-SP1. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High open-iscsi https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3513 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-18724 https://nvd.nist.gov/vuln/detail/CVE-2026-18724 openEuler-24.03-LTS-SP1 open-iscsi-2.1.5-18.oe2403sp1.aarch64.rpm open-iscsi-debuginfo-2.1.5-18.oe2403sp1.aarch64.rpm open-iscsi-debugsource-2.1.5-18.oe2403sp1.aarch64.rpm open-iscsi-devel-2.1.5-18.oe2403sp1.aarch64.rpm open-iscsi-help-2.1.5-18.oe2403sp1.aarch64.rpm open-iscsi-2.1.5-18.oe2403sp1.src.rpm open-iscsi-2.1.5-18.oe2403sp1.x86_64.rpm open-iscsi-debuginfo-2.1.5-18.oe2403sp1.x86_64.rpm open-iscsi-debugsource-2.1.5-18.oe2403sp1.x86_64.rpm open-iscsi-devel-2.1.5-18.oe2403sp1.x86_64.rpm open-iscsi-help-2.1.5-18.oe2403sp1.x86_64.rpm A stack buffer overflow vulnerability exists in the idbm_recinfo_config() function in open-iscsi (iscsi-initiator-utils). An attacker can craft a malicious SendTargets TargetName containing newline characters and oversized injected keys or values to inject extra configuration lines into persisted node records. When the record is reparsed, due to missing bounds checking, a stack buffer overflow occurs, leading to denial of service or potential memory corruption. The affected component is usr/idbm.c:idbm_recinfo_config in iscsi-initiator-utils, with attacker-controlled input reaching it through SendTargets handling in usr/discovery.c. 2026-08-30 CVE-2026-18724 openEuler-24.03-LTS-SP1 High 7.6 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H open-iscsi security update 2026-08-30 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3513