Summary
The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service (iSNS) protocol allows automated discovery, management and configuration of iSCSI and Fibre Channel devices (using iFCP gateways) on a TCP/IP network.
Security Fix(es):
* open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder (CVE-2026-55995)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | isns-utils | 0.103-1.el10_2.1 |
| AlmaLinux · 10 | isns-utils-libs | 0.103-1.el10_2.1 |
Vulnerabilities 1
-
High 8.7
Double-free in the iSNS attribute decoder in open-iscsi
A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.