CVE-Katalog
CVE-2007-3099
open-iscsi: CVE-2007-3099
- Schweregrad
- High
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.76% · Oct 22, 2026
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which allows remote attackers to access the management interface and cause a denial of service (iscsid exit or iSCSI connection loss).
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | open-iscsi | sid | 2.1.13-1 | fixed |
| Debian | open-iscsi | forky | 2.1.13-1 | fixed |
| Debian | open-iscsi | trixie | 2.1.11-1+deb13u2 | fixed |
| Debian | open-iscsi | bookworm | 2.1.8-1 | fixed |
| Debian | open-iscsi | bookworm-security | 2.1.8-1+deb12u1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | open-iscsi | source | sid | 2.0.865-1 | medium | Not reported | [429225] |
| Debian | open-iscsi | source | forky | 2.0.865-1 | medium | Not reported | [429225] |
| Debian | open-iscsi | source | trixie | 2.0.865-1 | medium | Not reported | [429225] |
| Debian | open-iscsi | source | bookworm | 2.0.865-1 | medium | Not reported | [429225] |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [iscsiuio]Behoben
Quellpaket: [open-iscsi]
Details (2)
2.1.8-1· amd64 · bookwormBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · bookworm; dsa · open-iscsi · debian · 12
2.1.8-1· arm64 · bookwormBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · bookworm; dsa · open-iscsi · debian · 12
- [libopeniscsiusr]Behoben
Quellpaket: [open-iscsi]
Details (2)
2.1.8-1· amd64 · bookwormBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · bookworm; dsa · open-iscsi · debian · 12
2.1.8-1· arm64 · bookwormBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · bookworm; dsa · open-iscsi · debian · 12
- [libopeniscsiusr-dev]Behoben
Quellpaket: [open-iscsi]
Details (2)
2.1.8-1· all · bookwormBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · bookworm; dsa · open-iscsi · debian · 12
2.1.8-1· all · bookwormBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · bookworm; dsa · open-iscsi · debian · 12
- [open-iscsi]Behoben
Details (2)
2.1.8-1· amd64 · bookwormBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · bookworm; dsa · open-iscsi · debian · 12
2.1.8-1· arm64 · bookwormBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · bookworm; dsa · open-iscsi · debian · 12
[Debian 13 (Trixie)]
- [iscsiuio]Behoben
Quellpaket: [open-iscsi]
Details (2)
2.1.11-1+deb13u2· amd64 · trixieBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · 13
2.1.11-1+deb13u2· arm64 · trixieBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · 13
- [libopeniscsiusr]Behoben
Quellpaket: [open-iscsi]
Details (2)
2.1.11-1+deb13u2· amd64 · trixieBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · 13
2.1.11-1+deb13u2· arm64 · trixieBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · 13
- [libopeniscsiusr-dev]Behoben
Quellpaket: [open-iscsi]
Details (2)
2.1.11-1+deb13u2· all · trixieBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · 13
2.1.11-1+deb13u2· all · trixieBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · 13
- [open-iscsi]Behoben
Details (2)
2.1.11-1+deb13u2· amd64 · trixieBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · 13
2.1.11-1+deb13u2· arm64 · trixieBehoben · Behoben:
2.0.865-1dsa · open-iscsi · debian · 13
Beobachtet: