CVE-2010-0743 Other in n/a
Remote attackers can crash the iSCSI target daemon or potentially execute code via format string vulnerabilities in iSNS message handling.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2010-0743?
CVE-2010-0743 is a medium-severity vulnerability in n/a, published on 8 Apr 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple format string vulnerabilities in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) 1.0.3, 0.9.5, and earlier and (2) iSCSI Enterprise Target (aka iscsitarget) 0.4.16 allow remote attackers to cause a denial of service (tgtd daemon crash) or possibly have unspecified other impact via vectors that involve the isns_attr_query and qry_rsp_handle functions, and are related to (a) client appearance and (b) client disappearance messages.
Weakness: CWE-134
Which versions are affected by CVE-2010-0743?
It affects 2 products.
Linux distribution packages (2)
scsi-target-utils Red Hat:rhel_cluster_storage:5 | All versions | 0:0.0-6.20091205snap.el5_5.2 |
scsi-target-utils-debuginfo Red Hat:rhel_cluster_storage:5 | All versions | 0:0.0-6.20091205snap.el5_5.2 |
Products include Iscsitarget Iscsitarget, Zaal Tgt.
How do I fix CVE-2010-0743?
Apply the vendor's patch.
Is CVE-2010-0743 being exploited?
There is no known exploitation of CVE-2010-0743 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2010-0743, DSA-2042-1, GHSA-jq32-jqvq-vqv9, RHSA-2010:0362.