CVE-2007-3100
usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with...
usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (world-writable/world-readable) for managing log messages using shared memory, which allows local users to cause a denial of service (hang) by grabbing the semaphore.
Exploit likelihood
What each source reports
NVD Score used
usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (world-writable/world-readable) for managing log messages using shared memory, which allows local users to cause a denial of service (hang) by grabbing the semaphore.
- Record
CVE-2007-3100- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (world-writable/world-readable) for managing log messages using shared memory, which allows local users to cause a denial of service (hang) by grabbing the semaphore.
- Record
CVE-2007-3100- Updated
- 2026-11-02
EUVDEUVD-2007-3092 No score
usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (world-writable/world-readable) for managing log messages using shared memory, which allows local users to cause a denial of service (hang) by grabbing the semaphore.
- Record
EUVD-2007-3092- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jgp8-v927-5p6w No score
usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with...
usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (world-writable/world-readable) for managing log messages using shared memory, which allows local users to cause a denial of service (hang) by grabbing the semaphore.
- Record
GHSA-jgp8-v927-5p6w- Updated
- 2026-11-02
OSV No score
usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (world-writable/world-readable) for managing log messages using shared memory, which allows local users to cause a denial of service (hang) by grabbing the semaphore.
- Record
CVE-2007-3100- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-3100 No score
usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (world-writable/world-readable) for managing log messages using shared memory, which allows local users to cause a denial of service (hang) by grabbing the semaphore.
- Record
DEBIAN-CVE-2007-3100- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
open-iscsiDebian:12 |
before 2.0.865-1 | 2.0.865-1 |
open-iscsiDebian:13 |
before 2.0.865-1 | 2.0.865-1 |
open-iscsiDebian:14 |
before 2.0.865-1 | 2.0.865-1 |
open-iscsiDebian:4.0 From an advisory covering 2 CVEs |
before 2.0.730-1etch1, plus listed versions 2.0.730-1 |
2.0.730-1etch1 |
iscsi-initiator-utilsRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:6.2.0.742-0.6.el5 | 0:6.2.0.742-0.6.el5 |
iscsi-initiator-utils-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:6.2.0.742-0.6.el5 | 0:6.2.0.742-0.6.el5 |
iscsi-initiator-utilsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:6.2.0.742-0.6.el5 | 0:6.2.0.742-0.6.el5 |
iscsi-initiator-utils-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:6.2.0.742-0.6.el5 | 0:6.2.0.742-0.6.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3100 is a low vulnerability (CVSS 2.1) in Redhat Open Iscsi, published June 14, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in open-iscsi 2.0.865-1.
References
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=243719
secunia.com/advisories/25679
osvdb.org/37270
securityfocus.com/bid/24471
exchange.xforce.ibmcloud.com/vulnerabilities/34943
securitytracker.com/id?1018246
Show 22 moreShow less
support.novell.com/techcenter/psdb/187174044e1dbe78726bcf840f7530ed.html
novell.com/linux/security/advisories/2007_17_sr.html
svn.berlios.de/viewcvs/open-iscsi?rev=858&view=rev
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10653
debian.org/security/2007/dsa-1314
redhat.com/support/errata/RHSA-2007-0497.html
nvd.nist.gov/vuln/detail/CVE-2007-3100
github.com/advisories/GHSA-jgp8-v927-5p6w
security-tracker.debian.org/tracker/CVE-2007-3100
access.redhat.com/errata/RHSA-2007:0497
kbase.redhat.com/faq/FAQ_105_10521.shtm
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0497.json
cve.org/CVERecord?id=CVE-2007-3099