CVE-2010-2221
Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework...
Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.
- Record
CVE-2010-2221- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.
- Record
CVE-2010-2221- Updated
- 2026-11-02
EUVDEUVD-2010-2237 No score
Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.
- Record
EUVD-2010-2237- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pf38-p9mr-xh7h No score
Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework...
Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.
- Record
GHSA-pf38-p9mr-xh7h- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
scsi-target-utilsRed Hat:rhel_cluster_storage:5 |
before 0:0.0-6.20091205snap.el5_5.3 | 0:0.0-6.20091205snap.el5_5.3 |
scsi-target-utils-debuginfoRed Hat:rhel_cluster_storage:5 |
before 0:0.0-6.20091205snap.el5_5.3 | 0:0.0-6.20091205snap.el5_5.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2221 is a medium vulnerability (CVSS 5.0) in Arne Redlich \& Ross Walker Iscsitarget, published July 8, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.35%, the 92nd percentile. Fixed in scsi-target-utils 0:0.0-6.20091205snap.el5_5.3.
References
scst.svn.sourceforge.net/viewvc/scst?view=revision&revision=1793
archives.neohapsis.com/archives/bugtraq/2010-07/0022.html
vupen.com/english/advisories/2010/1760
osvdb.org/65992
mandriva.com/security/advisories?name=MDVSA-2010:131
Show 21 moreShow less
securityfocus.com/bid/41327
redhat.com/support/errata/RHSA-2010-0518.html
sourceforge.net/mailarchive/forum.php?thread_name=E2BB8074E5500C42984D980D4BD78EF904075006%40MFG-NYC-EXCH2.mfg.prv&forum_name=iscsitarget-devel
secunia.com/advisories/40485
lists.wpkg.org/pipermail/stgt/2010-July/003858.html
lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
bugzilla.redhat.com/show_bug.cgi?id=593877
securitytracker.com/id?1024175
nvd.nist.gov/vuln/detail/CVE-2010-2221
access.redhat.com/errata/RHSA-2010:0518
github.com/advisories/GHSA-pf38-p9mr-xh7h
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0518.json
cve.org/CVERecord?id=CVE-2010-2221