rpm package
opensuse/open-iscsi&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/open-iscsi&distro=openSUSE%20Leap%2016.0
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-44944 | Hig | — | < 2.1.12-160000.4.1 | 2.1.12-160000.4.1 | Jul 29, 2026 | An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket. This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e. | |
| CVE-2026-44943 | Med | — | < 2.1.12-160000.4.1 | 2.1.12-160000.4.1 | Jul 29, 2026 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through 668ca1df |
- affected < 2.1.12-160000.4.1fixed 2.1.12-160000.4.1
An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket. This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.
- affected < 2.1.12-160000.4.1fixed 2.1.12-160000.4.1
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through 668ca1df