DSA-2042-1 iscsitarget -- format stringID: oval:org.secpod.oval:def:600162 | Date: (C)2011-01-28 (M)2023-02-20 |
Class: PATCH | Family: unix |
Florent Daigniere discovered multiple format string vulnerabilities in Linux SCSI target framework allow remote attackers to cause a denial of service in the ietd daemon. The flaw could be trigger by sending a carefully-crafted Internet Storage Name Service request. For the stable distribution , this problem has been fixed in version 0.4.16+svn162-3.1+lenny1. For the testing distribution , this problem has been fixed in version 0.4.17+svn229-1.4. For the unstable distribution , this problem has been fixed in version 0.4.17+svn229-1.4.