CESA-2010:0362 -- centos 5 x86_64 scsi-target-utilsID: oval:org.secpod.oval:def:201886 | Date: (C)2012-01-31 (M)2023-02-20 |
Class: PATCH | Family: unix |
The scsi-target-utils package contains the daemon and tools to set up and monitor SCSI targets. Currently, iSCSI software and iSER targets are supported. A format string flaw was found in scsi-target-utils" tgtd daemon. A remote attacker could trigger this flaw by sending a carefully-crafted Internet Storage Name Service request, causing the tgtd daemon to crash. All scsi-target-utils users should upgrade to this updated package, which contains a backported patch to correct this issue. All running scsi-target-utils services must be restarted for the update to take effect.
Product: |
scsi-target-utils |