CVE-2011-0001
Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon...
CVE-2011-0001 is a medium vulnerability (CVSS 5.0) in Zaal Tgt, published March 15, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.11%, the 92nd percentile. Fixed in tgt 1:1.0.4-3.
Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown vectors related to a buffer overflow during iscsi login. NOTE: some of these details are obtained from third party information.
Exploit likelihood
What each source reports
NVD Score used
Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown vectors related to a buffer overflow during iscsi login. NOTE: some of these details are obtained from third party information.
- Record
CVE-2011-0001- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown vectors related to a buffer overflow during iscsi login. NOTE: some of these details are obtained from third party information.
- Record
CVE-2011-0001- Updated
- 2026-11-02
EUVDEUVD-2011-0028 No score
Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown vectors related to a buffer overflow during iscsi login. NOTE: some of these details are obtained from third party information.
- Record
EUVD-2011-0028- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wm9f-xrfg-h5mx No score
Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon...
Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown vectors related to a buffer overflow during iscsi login. NOTE: some of these details are obtained from third party information.
- Record
GHSA-wm9f-xrfg-h5mx- Updated
- 2026-11-02
OSV No score
Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown vectors related to a buffer overflow during iscsi login. NOTE: some of these details are obtained from third party information.
- Record
CVE-2011-0001- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-0001 No score
Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown vectors related to a buffer overflow during iscsi login. NOTE: some of these details are obtained from third party information.
- Record
DEBIAN-CVE-2011-0001- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tgtDebian:12 |
before 1:1.0.4-3 | 1:1.0.4-3 |
tgtDebian:13 |
before 1:1.0.4-3 | 1:1.0.4-3 |
tgtDebian:14 |
before 1:1.0.4-3 | 1:1.0.4-3 |
tgtDebian:6.0 |
before 1:1.0.4-2squeeze1, plus listed versions 1:1.0.4-2 |
1:1.0.4-2squeeze1 |
scsi-target-utilsRed Hat:rhel_cluster_storage:5 |
before 0:1.0.8-0.el5_6.1 | 0:1.0.8-0.el5_6.1 |
scsi-target-utils-debuginfoRed Hat:rhel_cluster_storage:5 |
before 0:1.0.8-0.el5_6.1 | 0:1.0.8-0.el5_6.1 |
scsi-target-utilsRed Hat:enterprise_linux:6::server |
before 0:1.0.4-3.el6_0.1 | 0:1.0.4-3.el6_0.1 |
scsi-target-utils-debuginfoRed Hat:enterprise_linux:6::server |
before 0:1.0.4-3.el6_0.1 | 0:1.0.4-3.el6_0.1 |
scsi-target-utilsRed Hat:enterprise_linux:6::workstation |
before 0:1.0.4-3.el6_0.1 | 0:1.0.4-3.el6_0.1 |
scsi-target-utils-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:1.0.4-3.el6_0.1 | 0:1.0.4-3.el6_0.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
redhat.com/support/errata/RHSA-2011-0332.html
vupen.com/english/advisories/2011/0636
lists.wpkg.org/pipermail/stgt/2011-March/004473.html
bugzilla.redhat.com/attachment.cgi?id=473779&action=diff
secunia.com/advisories/43706
Show 14 moreShow less
debian.org/security/2011/dsa-2209
securityfocus.com/bid/46817
exchange.xforce.ibmcloud.com/vulnerabilities/66010
securitytracker.com/id?1025184
nvd.nist.gov/vuln/detail/CVE-2011-0001
github.com/advisories/GHSA-wm9f-xrfg-h5mx
security-tracker.debian.org/tracker/CVE-2011-0001
access.redhat.com/errata/RHSA-2011:0332
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0332.json
cve.org/CVERecord?id=CVE-2011-0001