CVE-2026-18724

Medium

Published: —Translated: 18/08/2026(UTC)NVD NIST

Summary

The iscsi-initiator-utils package version 6.2.1.11-0.git4b3e853.el10 has a stack buffer overflow vulnerability in idbm_recinfo_config. A malicious iSCSI target can inject an extra configuration line into a persisted node record via a crafted SendTargets TargetName, later causing a stack buffer overflow.

Risk Assessment

Risk of remote code execution or system crash due to buffer overflow, potentially compromising system integrity.

Recommendation

Upgrade the iscsi-initiator-utils package to the latest available version and restrict trust in iSCSI sources.

Original NVD description (English source)

AI_ONLY_REPORT package: iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10 ------ Summary: Stack Buffer Overflow in idbm_recinfo_config via Malicious iSCSI Target: a crafted SendTargets TargetName can inject an extra configuration line into a persisted node record and later cause a stack buffer ov