CVE-2026-115484

Élevée · CVSS 7.6

Description officielle (NVD)

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the daemon or corrupt its network configuration.

En bref

Publiée le23/10/2026
Modifiée le23/10/2026
CVSS7.6 (v3.1)
CWECWE-125

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Sources officielles

NVD (NIST) CVE.org

Besoin d'aide ?

Nos experts évaluent votre exposition et vous accompagnent dans la correction.

Nous contacter