Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown vectors related to a buffer overflow during iscsi login. NOTE: some of these details are obtained from third party information.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tgt | Zaal | 1.0.5 | 1.0.5 |
| Tgt | Zaal | 1.0.3 | 1.0.3 |
| Tgt | Zaal | 1.0.9 | 1.0.9 |
| Tgt | Zaal | 1.0.6 | 1.0.6 |
| Tgt | Zaal | 1.0.12 | 1.0.12 |
| Tgt | Zaal | 0.9.5 | 0.9.5 |
| Tgt | Zaal | * | 1.0.13 |
| Tgt | Zaal | 1.0.4 | 1.0.4 |
| Tgt | Zaal | 1.0.1 | 1.0.1 |
| Tgt | Zaal | 1.0.11 | 1.0.11 |
| Tgt | Zaal | 1.0.2 | 1.0.2 |
| Tgt | Zaal | 1.0.8 | 1.0.8 |
| Tgt | Zaal | 1.0.7 | 1.0.7 |
| Tgt | Zaal | 1.0.0 | 1.0.0 |
| Tgt | Zaal | 1.0.10 | 1.0.10 |
| Red Hat Enterprise Linux 5 | RedHat | scsi-target-utils-0:1.0.8-0.el5_6.1 | * |
| Red Hat Enterprise Linux 6 | RedHat | scsi-target-utils-0:1.0.4-3.el6_0.1 | * |
| Tgt | Ubuntu | devel | * |
| Tgt | Ubuntu | hardy | * |
| Tgt | Ubuntu | karmic | * |
| Tgt | Ubuntu | lucid | * |
| Tgt | Ubuntu | maverick | * |
| Tgt | Ubuntu | natty | * |
| Tgt | Ubuntu | oneiric | * |
| Tgt | Ubuntu | precise | * |
| Tgt | Ubuntu | quantal | * |
| Tgt | Ubuntu | raring | * |
| Tgt | Ubuntu | saucy | * |
| Tgt | Ubuntu | upstream | * |