According to the version of the iscsi-initiator-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An issue was discovered in Open-iSCSI through 2.0.875.
    A local attacker can cause the iscsiuio server to abort     or potentially execute code by sending messages with     incorrect lengths, which (due to lack of checking) can     lead to buffer overflows, and result in aborts (with     overflow checking enabled) or code execution. The     process_iscsid_broadcast function in     iscsiuio/src/unix/iscsid_ipc.c does not validate the     payload length before a write     operation.(CVE-2017-17840)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - までの Open-iSCSI で問題が見つかりました 2.0.875。ローカルの攻撃者は、不適切な長さのメッセージを送信することで、iscsiuio サーバーを中止させたり、コードを実行したりする可能性があります。これにより（チェックがないため）バッファオーバーフローを引き起こし、（オーバーフローチェックを有効にして）中止したり、コードを実行したりする可能性があります。iscsiuio/src/unix/iscsid_ipc.cのprocess_iscsid_broadcast関数は、書き込み操作の前にペイロード長を検証しません。 （CVE-2017-17840）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to     abort or potentially execute code by sending messages with incorrect lengths, which (due to lack of     checking) can lead to buffer overflows, and result in aborts (with overflow checking enabled) or code     execution. The process_iscsid_broadcast function in iscsiuio/src/unix/iscsid_ipc.c does not validate the     payload length before a write operation. (CVE-2017-17840)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在到 2.0.875為止的 Open-iSCSI 中發現一個問題。本機攻擊者可傳送長度不正確的訊息，造成 iscsiuio 伺服器中止或可能執行程式碼，這 (由於缺少檢查) 可導致緩衝區溢位，並導致中止 (啟用溢位檢查) 或程式碼執行。iscsiuio/src/unix/iscsid_ipc.c 中的 process_iscsid_broadcast 函式未在寫入作業前驗證承載長度。 (CVE-2017-17840)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 Open-iSCSI 到 2.0.875中发现问题。本地攻击者可通过发送错误长度的消息造成 iscsiuio 服务器中止或可能执行代码，这（由于缺少检查）可导致缓冲区溢出，并导致中止（启用了溢出检查）或代码执行。iscsiuio/src/unix/iscsid_ipc.c 中的 process_iscsid_broadcast 函数未在写入操作之前验证负载长度。 (CVE-2017-17840)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

According to the versions of the iscsi-initiator-utils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to     abort or potentially execute code by sending messages with incorrect lengths, which (due to lack of     checking) can lead to buffer overflows, and result in aborts (with overflow checking enabled) or code     execution. The process_iscsid_broadcast function in iscsiuio/src/unix/iscsid_ipc.c does not validate the     payload length before a write operation. (CVE-2017-17840)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
132131	EulerOS 2.0 SP3 : iscsi-initiator-utils (EulerOS-SA-2019-2596)	Nessus	Huawei Local Security Checks	2019/12/18	2024/4/4	high
221173	Linux Distros のパッチ未適用の脆弱性: CVE-2017-17840	Nessus	Misc.	2025/3/4	2025/9/3	high
221173	Linux Distros Unpatched Vulnerability : CVE-2017-17840	Nessus	Misc.	2025/3/4	2025/9/3	high
221173	Linux Distros 未修補弱點：CVE-2017-17840	Nessus	Misc.	2025/3/4	2025/9/3	high
221173	Linux Distros 未修补的漏洞: CVE-2017-17840	Nessus	Misc.	2025/3/4	2025/9/3	high
188663	EulerOS Virtualization 3.0.6.6 : iscsi-initiator-utils (EulerOS-SA-2023-3399)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high

检测

插件搜索

high

high

high

high

high

high