CESA-2011:0332 -- centos 5 i386 scsi-target-utilsID: oval:org.secpod.oval:def:201489 | Date: (C)2012-01-31 (M)2023-11-09 |
Class: PATCH | Family: unix |
The scsi-target-utils package contains the daemon and tools to set up and monitor SCSI targets. Currently, iSCSI software and iSER targets are supported. A double-free flaw was found in scsi-target-utils" tgtd daemon. A remote attacker could trigger this flaw by sending carefully-crafted network traffic, causing the tgtd daemon to crash. Red Hat would like to thank Emmanuel Bouillon of NATO C3 Agency for reporting this issue. All scsi-target-utils users should upgrade to this updated package, which contains a backported patch to correct this issue. All running scsi-target-utils services must be restarted for the update to take effect.
Product: |
scsi-target-utils |