CVE-2017-17840

An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which (due to lack of checking) can lead to buffer overflows, and result in aborts (with overflow checking enabled) or code execution. The process_iscsid_broadcast function in iscsiuio/src/unix/iscsid_ipc.c does not validate the payload length before a write operation.

• CWE-119

• http://www.openwall.com/lists/oss-security/2017/12/13/2Mailing List, Third Party Advisory
• https://bugzilla.opensuse.org/show_bug.cgi?id=1072312Issue Tracking, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2017/12/13/2Mailing List, Third Party Advisory
• https://bugzilla.opensuse.org/show_bug.cgi?id=1072312Issue Tracking, Third Party Advisory

Published

Dec 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17835In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability al…
• CVE-2017-17836In Apache Airflow 1.8.2 and earlier, an experimental Airflow…
• CVE-2017-17837The Apache DeltaSpike-JSF 1.8.0 module has a XSS injection l…6.1
• CVE-2017-17838Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-17839Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-1784IBM Cognos Analytics 11.0 could produce results in temporary…
• CVE-2017-17841Palo Alto Networks PAN-OS 6.1, 7.1, and 8.0.x before 8.0.7, …
• CVE-2017-17843An issue was discovered in Enigmail before 1.9.9 that allows…
• CVE-2017-17844An issue was discovered in Enigmail before 1.9.9. A remote a…
• CVE-2017-17845An issue was discovered in Enigmail before 1.9.9. Improper R…
• CVE-2017-17846An issue was discovered in Enigmail before 1.9.9. Regular ex…
• CVE-2017-17847An issue was discovered in Enigmail before 1.9.9. Signature …