CVE-2017-17840 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-17840 Interim 1 49 2024-07-27T00:41:18Z current 2021-05-30T14:05:05Z 2024-07-27T00:41:18Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-17840 An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which (due to lack of checking) can lead to buffer overflows, and result in aborts (with overflow checking enabled) or code execution. The process_iscsid_broadcast function in iscsiuio/src/unix/iscsid_ipc.c does not validate the payload length before a write operation. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE CaaS Platform 4.5 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Manager Retail Branch Server 4.0 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Legacy 15 SP3 SUSE Linux Enterprise Module for Legacy 15 SP4 iscsiuio libopeniscsiusr0_1_0 libopeniscsiusr0_2_0 open-iscsi open-iscsi-2.0.873-0.41.4.1 open-iscsi-devel open-iscsi-2.0.873-0.41.4.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA iscsiuio as a component of SUSE CaaS Platform 4.0 libopeniscsiusr0_2_0 as a component of SUSE CaaS Platform 4.0 open-iscsi as a component of SUSE CaaS Platform 4.0 open-iscsi-devel as a component of SUSE CaaS Platform 4.0 open-iscsi as a component of SUSE CaaS Platform 4.5 open-iscsi as a component of SUSE Enterprise Storage 6 open-iscsi as a component of SUSE Enterprise Storage 7 iscsiuio as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libopeniscsiusr0_2_0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS open-iscsi as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS open-iscsi-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS iscsiuio as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libopeniscsiusr0_2_0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS open-iscsi as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS open-iscsi-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS iscsiuio as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libopeniscsiusr0_2_0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS open-iscsi as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS open-iscsi-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS iscsiuio as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libopeniscsiusr0_2_0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS open-iscsi as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS open-iscsi-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS iscsiuio as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libopeniscsiusr0_2_0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS open-iscsi as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS open-iscsi-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS iscsiuio as a component of SUSE Linux Enterprise Micro 5.0 libopeniscsiusr0_2_0 as a component of SUSE Linux Enterprise Micro 5.0 open-iscsi as a component of SUSE Linux Enterprise Micro 5.0 libopeniscsiusr0_1_0 as a component of SUSE Linux Enterprise Module for Legacy 15 SP3 open-iscsi as a component of SUSE Linux Enterprise Module for Legacy 15 SP3 libopeniscsiusr0_1_0 as a component of SUSE Linux Enterprise Module for Legacy 15 SP4 open-iscsi as a component of SUSE Linux Enterprise Module for Legacy 15 SP4 iscsiuio as a component of SUSE Linux Enterprise Real Time 15 SP2 libopeniscsiusr0_2_0 as a component of SUSE Linux Enterprise Real Time 15 SP2 open-iscsi as a component of SUSE Linux Enterprise Real Time 15 SP2 open-iscsi-devel as a component of SUSE Linux Enterprise Real Time 15 SP2 open-iscsi as a component of SUSE Linux Enterprise Server 11 SP4 LTSS iscsiuio as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libopeniscsiusr0_2_0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS open-iscsi as a component of SUSE Linux Enterprise Server 15 SP1-LTSS open-iscsi-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS iscsiuio as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libopeniscsiusr0_2_0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS open-iscsi as a component of SUSE Linux Enterprise Server 15 SP2-LTSS open-iscsi-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS open-iscsi as a component of SUSE Linux Enterprise Server 15-ESPOS iscsiuio as a component of SUSE Linux Enterprise Server 15-LTSS libopeniscsiusr0_2_0 as a component of SUSE Linux Enterprise Server 15-LTSS open-iscsi as a component of SUSE Linux Enterprise Server 15-LTSS open-iscsi-devel as a component of SUSE Linux Enterprise Server 15-LTSS open-iscsi as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 open-iscsi as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 iscsiuio as a component of SUSE Linux Enterprise Server for SAP Applications 15 libopeniscsiusr0_2_0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 open-iscsi as a component of SUSE Linux Enterprise Server for SAP Applications 15 open-iscsi-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 iscsiuio as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libopeniscsiusr0_2_0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 open-iscsi as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 open-iscsi-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 iscsiuio as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libopeniscsiusr0_2_0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 open-iscsi as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 open-iscsi-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 open-iscsi as a component of SUSE Manager Proxy 4.0 open-iscsi as a component of SUSE Manager Proxy 4.1 open-iscsi as a component of SUSE Manager Retail Branch Server 4.0 open-iscsi as a component of SUSE Manager Retail Branch Server 4.1 open-iscsi as a component of SUSE Manager Server 4.0 open-iscsi as a component of SUSE Manager Server 4.1 An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which (due to lack of checking) can lead to buffer overflows, and result in aborts (with overflow checking enabled) or code execution. The process_iscsid_broadcast function in iscsiuio/src/unix/iscsid_ipc.c does not validate the payload length before a write operation. CVE-2017-17840 SUSE Linux Enterprise Server 11 SP3-TERADATA:open-iscsi-2.0.873-0.41.4.1 SUSE CaaS Platform 4.0:iscsiuio SUSE CaaS Platform 4.0:libopeniscsiusr0_2_0 SUSE CaaS Platform 4.0:open-iscsi SUSE CaaS Platform 4.0:open-iscsi-devel SUSE CaaS Platform 4.5:open-iscsi SUSE Enterprise Storage 6:open-iscsi SUSE Enterprise Storage 7:open-iscsi SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:iscsiuio SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopeniscsiusr0_2_0 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:open-iscsi SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:open-iscsi-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:iscsiuio SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopeniscsiusr0_2_0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:open-iscsi SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:open-iscsi-devel SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:iscsiuio SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopeniscsiusr0_2_0 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:open-iscsi SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:open-iscsi-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:iscsiuio SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopeniscsiusr0_2_0 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:open-iscsi SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:open-iscsi-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:iscsiuio SUSE Linux Enterprise High Performance Computing 15-LTSS:libopeniscsiusr0_2_0 SUSE Linux Enterprise High Performance Computing 15-LTSS:open-iscsi SUSE Linux Enterprise High Performance Computing 15-LTSS:open-iscsi-devel SUSE Linux Enterprise Micro 5.0:iscsiuio SUSE Linux Enterprise Micro 5.0:libopeniscsiusr0_2_0 SUSE Linux Enterprise Micro 5.0:open-iscsi SUSE Linux Enterprise Module for Legacy 15 SP3:libopeniscsiusr0_1_0 SUSE Linux Enterprise Module for Legacy 15 SP3:open-iscsi SUSE Linux Enterprise Module for Legacy 15 SP4:libopeniscsiusr0_1_0 SUSE Linux Enterprise Module for Legacy 15 SP4:open-iscsi SUSE Linux Enterprise Real Time 15 SP2:iscsiuio SUSE Linux Enterprise Real Time 15 SP2:libopeniscsiusr0_2_0 SUSE Linux Enterprise Real Time 15 SP2:open-iscsi SUSE Linux Enterprise Real Time 15 SP2:open-iscsi-devel SUSE Linux Enterprise Server 15 SP1-LTSS:iscsiuio SUSE Linux Enterprise Server 15 SP1-LTSS:libopeniscsiusr0_2_0 SUSE Linux Enterprise Server 15 SP1-LTSS:open-iscsi SUSE Linux Enterprise Server 15 SP1-LTSS:open-iscsi-devel SUSE Linux Enterprise Server 15 SP2-LTSS:iscsiuio SUSE Linux Enterprise Server 15 SP2-LTSS:libopeniscsiusr0_2_0 SUSE Linux Enterprise Server 15 SP2-LTSS:open-iscsi SUSE Linux Enterprise Server 15 SP2-LTSS:open-iscsi-devel SUSE Linux Enterprise Server 15-ESPOS:open-iscsi SUSE Linux Enterprise Server 15-LTSS:iscsiuio SUSE Linux Enterprise Server 15-LTSS:libopeniscsiusr0_2_0 SUSE Linux Enterprise Server 15-LTSS:open-iscsi SUSE Linux Enterprise Server 15-LTSS:open-iscsi-devel SUSE Linux Enterprise Server Business Critical Linux 15 SP1:open-iscsi SUSE Linux Enterprise Server Business Critical Linux 15 SP2:open-iscsi SUSE Linux Enterprise Server for SAP Applications 15 SP1:iscsiuio SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopeniscsiusr0_2_0 SUSE Linux Enterprise Server for SAP Applications 15 SP1:open-iscsi SUSE Linux Enterprise Server for SAP Applications 15 SP1:open-iscsi-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:iscsiuio SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopeniscsiusr0_2_0 SUSE Linux Enterprise Server for SAP Applications 15 SP2:open-iscsi SUSE Linux Enterprise Server for SAP Applications 15 SP2:open-iscsi-devel SUSE Linux Enterprise Server for SAP Applications 15:iscsiuio SUSE Linux Enterprise Server for SAP Applications 15:libopeniscsiusr0_2_0 SUSE Linux Enterprise Server for SAP Applications 15:open-iscsi SUSE Linux Enterprise Server for SAP Applications 15:open-iscsi-devel SUSE Manager Proxy 4.0:open-iscsi SUSE Manager Proxy 4.1:open-iscsi SUSE Manager Retail Branch Server 4.0:open-iscsi SUSE Manager Retail Branch Server 4.1:open-iscsi SUSE Manager Server 4.0:open-iscsi SUSE Manager Server 4.1:open-iscsi important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P 7.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H