CVE catalog

CVE-2010-0743

tgt: CVE-2010-0743

[CVE catalog]

Severity
High
Published
Source
[NVD] · [CVE record]
EPSS
3.38% · Oct 25, 2026

Multiple format string vulnerabilities in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) 1.0.3, 0.9.5, and earlier and (2) iSCSI Enterprise Target (aka iscsitarget) 0.4.16 allow remote attackers to cause a denial of service (tgtd daemon crash) or possibly have unspecified other impact via vectors that involve the isns_attr_query and qry_rsp_handle functions, and are related to (a) client appearance and (b) client disappearance messages.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiantgtsid1:1.0.85-1.3fixed
Debiantgtforky1:1.0.85-1.3fixed
Debiantgttrixie1:1.0.85-1.3fixed
Debiantgtbookworm1:1.0.85-1+deb12u1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiantgtsourcesid1:1.0.3-2mediumNot reported[576086]
Debiantgtsourceforky1:1.0.3-2mediumNot reported[576086]
Debiantgtsourcetrixie1:1.0.3-2mediumNot reported[576086]
Debiantgtsourcebookworm1:1.0.3-2mediumNot reported[576086]

[Debian bug #576086]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [tgt]Fixed
    Details (2)

    • 1:1.0.85-1+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:1.0.3-2

      dsa · tgt · debian · bookworm; dsa · tgt · debian · 12

    • 1:1.0.85-1+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:1.0.3-2

      dsa · tgt · debian · bookworm; dsa · tgt · debian · 12

  • [tgt-glusterfs]Fixed

    Source package: [tgt]

    Details (2)

    • 1:1.0.85-1+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:1.0.3-2

      dsa · tgt · debian · bookworm; dsa · tgt · debian · 12

    • 1:1.0.85-1+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:1.0.3-2

      dsa · tgt · debian · bookworm; dsa · tgt · debian · 12

  • [tgt-rbd]Fixed

    Source package: [tgt]

    Details (2)

    • 1:1.0.85-1+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:1.0.3-2

      dsa · tgt · debian · bookworm; dsa · tgt · debian · 12

    • 1:1.0.85-1+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:1.0.3-2

      dsa · tgt · debian · bookworm; dsa · tgt · debian · 12

[Debian 13 (Trixie)]

  • [tgt]Fixed
    Details (2)

    • 1:1.0.85-1.3 · amd64 · trixie

      Fixed · Fixed: 1:1.0.3-2

      dsa · tgt · debian · 13

    • 1:1.0.85-1.3 · arm64 · trixie

      Fixed · Fixed: 1:1.0.3-2

      dsa · tgt · debian · 13

  • [tgt-glusterfs]Fixed

    Source package: [tgt]

    Details (2)

    • 1:1.0.85-1.3 · amd64 · trixie

      Fixed · Fixed: 1:1.0.3-2

      dsa · tgt · debian · 13

    • 1:1.0.85-1.3 · arm64 · trixie

      Fixed · Fixed: 1:1.0.3-2

      dsa · tgt · debian · 13

  • [tgt-rbd]Fixed

    Source package: [tgt]

    Details (2)

    • 1:1.0.85-1.3 · amd64 · trixie

      Fixed · Fixed: 1:1.0.3-2

      dsa · tgt · debian · 13

    • 1:1.0.85-1.3 · arm64 · trixie

      Fixed · Fixed: 1:1.0.3-2

      dsa · tgt · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]