Deskripsi CVE

Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	5		AV:N/AC:L/Au:N/C:N/I:N/A:P	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Zaal>>Tgt >> Version Hingga (termasuk) 1.0.5

Zaal>>Tgt >> Version 0.9.5

Zaal>>Tgt >> Version 1.0.0

Zaal>>Tgt >> Version 1.0.1

Zaal>>Tgt >> Version 1.0.2

Zaal>>Tgt >> Version 1.0.3

Zaal>>Tgt >> Version 1.0.4

Linux>>Linux_kernel >> Version *

Konfigurasi 0

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version Hingga (termasuk) 1.4.20

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.1.0

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.2.0

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.2.1

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.2.2

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.2.3

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.2.4

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.2.5

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.2.6

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.3.0

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.3.1

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.3.2

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.3.3

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.3.4

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.3.5

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.3.6

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.3.7

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.3.8

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.0

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.1

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.2

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.3

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.4

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.5

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.6

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.7

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.8

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.9

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.10

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.11

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.12

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.13

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.14

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.15

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.16

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 0.4.17

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 1.4.18

Arne_redlich_\&_ross_walker>>Iscsitarget >> Version 1.4.19

Konfigurasi 0

Vladislav_bolkhovitin>>Generic_scsi_target_subsystem >> Version Hingga (termasuk) 1.0.1

Vladislav_bolkhovitin>>Generic_scsi_target_subsystem >> Version 0.9.0a

Vladislav_bolkhovitin>>Generic_scsi_target_subsystem >> Version 0.9.1

Vladislav_bolkhovitin>>Generic_scsi_target_subsystem >> Version 0.9.2

Vladislav_bolkhovitin>>Generic_scsi_target_subsystem >> Version 0.9.3

Vladislav_bolkhovitin>>Generic_scsi_target_subsystem >> Version 0.9.4

Vladislav_bolkhovitin>>Generic_scsi_target_subsystem >> Version 0.9.5

Vladislav_bolkhovitin>>Generic_scsi_target_subsystem >> Version 0.9.5.1

Vladislav_bolkhovitin>>Generic_scsi_target_subsystem >> Version 0.9.5.2

Vladislav_bolkhovitin>>Generic_scsi_target_subsystem >> Version 1.0.0

Linux>>Linux_kernel >> Version *

Referensi

http://scst.svn.sourceforge.net/viewvc/scst?view=revision&revision=1793
Tags : x_refsource_CONFIRM

http://archives.neohapsis.com/archives/bugtraq/2010-07/0022.html
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.vupen.com/english/advisories/2010/1760
Tags : vdb-entry, x_refsource_VUPEN

http://archives.neohapsis.com/archives/fulldisclosure/2010-07/0058.html
Tags : mailing-list, x_refsource_FULLDISC

http://www.osvdb.org/65992
Tags : vdb-entry, x_refsource_OSVDB

http://www.mandriva.com/security/advisories?name=MDVSA-2010:131
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.osvdb.org/65990
Tags : vdb-entry, x_refsource_OSVDB

http://www.securityfocus.com/bid/41327
Tags : vdb-entry, x_refsource_BID

http://www.redhat.com/support/errata/RHSA-2010-0518.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.osvdb.org/65991
Tags : vdb-entry, x_refsource_OSVDB

http://sourceforge.net/mailarchive/forum.php?thread_name=E2BB8074E5500C42984D980D4BD78EF904075006%40MFG-NYC-EXCH2.mfg.prv&forum_name=iscsitarget-devel
Tags : mailing-list, x_refsource_MLIST

http://secunia.com/advisories/40485
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.wpkg.org/pipermail/stgt/2010-July/003858.html
Tags : mailing-list, x_refsource_MLIST

http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
Tags : vendor-advisory, x_refsource_SUSE

https://bugzilla.redhat.com/show_bug.cgi?id=593877
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/40494
Tags : third-party-advisory, x_refsource_SECUNIA

http://scst.svn.sourceforge.net/viewvc/scst/trunk/iscsi-scst/usr/isns.c?r1=1793&r2=1792&pathrev=1793
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2010/1786
Tags : vdb-entry, x_refsource_VUPEN

http://www.securitytracker.com/id?1024175
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/40495
Tags : third-party-advisory, x_refsource_SECUNIA

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	8.23%	–	–
2022-03-13	–	–	8.23%	–	–
2022-04-03	–	–	8.23%	–	–
2023-02-05	–	–	2.69%	–	–
2023-02-19	–	–	8.23%	–	–
2023-03-12	–	–	–	59.3%	–
2024-02-11	–	–	–	59.3%	–
2024-06-02	–	–	–	59.3%	–
2024-10-13	–	–	–	56.6%	–
2024-11-24	–	–	–	56.32%	–
2024-12-22	–	–	–	25.46%	–
2025-01-05	–	–	–	23.6%	–
2025-01-19	–	–	–	23.6%	–
2025-03-18	–	–	–	–	7.19%
2025-03-30	–	–	–	–	6.08%
2026-01-01	–	–	–	–	6.08%
2026-01-04	–	–	–	–	6.08%
2026-02-22	–	–	–	–	6.08%
2026-04-12	–	–	–	–	6.42%

Tanggal	Persentil
2022-02-06	82%
2022-03-13	83%
2022-04-03	93%
2023-02-05	82%
2023-02-19	93%
2023-03-12	97%
2024-02-11	98%
2024-06-02	98%
2024-10-13	98%
2024-11-24	98%
2024-12-22	97%
2025-01-05	97%
2025-01-19	97%
2025-03-18	91%
2025-03-30	9%
2026-01-01	91%
2026-01-04	9%
2026-02-22	91%
2026-04-12	91%

CVE-2010-2221 : Detail

CVE-2010-2221

Deskripsi CVE

Informasi CVE

Kelemahan Terkait

Metrik

EPSS

Skor EPSS

Persentil EPSS

Produk yang Disebutkan

Konfigurasi 0

Konfigurasi 0

Konfigurasi 0

Referensi