{"schema_version":"1.7.2","id":"OESA-2026-3512","modified":"2026-08-30T04:14:35Z","published":"2026-08-30T04:14:35Z","upstream":["CVE-2026-18724"],"summary":"open-iscsi security update","details":"The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.\r\n\r\nSecurity Fix(es):\n\nA stack buffer overflow vulnerability exists in the idbm_recinfo_config() function in open-iscsi (iscsi-initiator-utils). An attacker can craft a malicious SendTargets TargetName containing newline characters and oversized injected keys or values to inject extra configuration lines into persisted node records. When the record is reparsed, due to missing bounds checking, a stack buffer overflow occurs, leading to denial of service or potential memory corruption. The affected component is usr/idbm.c:idbm_recinfo_config in iscsi-initiator-utils, with attacker-controlled input reaching it through SendTargets handling in usr/discovery.c.(CVE-2026-18724)","affected":[{"package":{"ecosystem":"openEuler:22.03-LTS-SP4","name":"open-iscsi","purl":"pkg:rpm/openEuler/open-iscsi&distro=openEuler-22.03-LTS-SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.5-18.oe2203sp4"}]}],"ecosystem_specific":{"aarch64":["open-iscsi-2.1.5-18.oe2203sp4.aarch64.rpm","open-iscsi-debuginfo-2.1.5-18.oe2203sp4.aarch64.rpm","open-iscsi-debugsource-2.1.5-18.oe2203sp4.aarch64.rpm","open-iscsi-devel-2.1.5-18.oe2203sp4.aarch64.rpm","open-iscsi-help-2.1.5-18.oe2203sp4.aarch64.rpm"],"src":["open-iscsi-2.1.5-18.oe2203sp4.src.rpm"],"x86_64":["open-iscsi-2.1.5-18.oe2203sp4.x86_64.rpm","open-iscsi-debuginfo-2.1.5-18.oe2203sp4.x86_64.rpm","open-iscsi-debugsource-2.1.5-18.oe2203sp4.x86_64.rpm","open-iscsi-devel-2.1.5-18.oe2203sp4.x86_64.rpm","open-iscsi-help-2.1.5-18.oe2203sp4.x86_64.rpm"]}}],"references":[{"type":"ADVISORY","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3512"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18724"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H"}],"database_specific":{"severity":"High"}}