ubuntu · CVE-2011-0001

Quick triage

Priority: medium Published: 2011-03-15 00:00:00 UTC Updated: 2025-08-04 19:23:57 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2011-0001 medium priority: Ubuntu including 1 source packages (tgt), 12 status rows across 12 suites (dapper, hardy, karmic, lucid, maverick, natty, oneiric, precise, quantal, raring, saucy, upstream): released 8, ignored 3, DNE 1.

Description:

Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown vectors related to a buffer overflow during iscsi login. NOTE: some of these details are obtained from third party information.

cvelogic Threat Intelligence