CVE-2021-3139

In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. NOTE: relative to CVE-2020-28374, this is a similar mistake in a different algorithm.

• CWE-22

• http://www.openwall.com/lists/oss-security/2021/01/13/5Mailing List, Mitigation, Third Party Advisory
• https://bugzilla.suse.com/attachment.cgi?id=844938Issue Tracking, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1178372Issue Tracking, Third Party Advisory
• https://github.com/open-iscsi/tcmu-runner/pull/644Patch, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2021/01/12/12Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2021/01/13/5Mailing List, Mitigation, Third Party Advisory
• https://bugzilla.suse.com/attachment.cgi?id=844938Issue Tracking, Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1178372Issue Tracking, Third Party Advisory
• https://github.com/open-iscsi/tcmu-runner/pull/644Patch, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2021/01/12/12Mailing List, Third Party Advisory

Published

Jan 13, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31381A configuration weakness in the JBoss Application Server (Ap…9.1
• CVE-2021-31382On PTX1000 System, PTX10002-60C System, after upgrading to a…9
• CVE-2021-31383In Point to MultiPoint (P2MP) scenarios within established s…7.5
• CVE-2021-31384Due to a Missing Authorization weakness and Insufficient Gra…10
• CVE-2021-31385An Improper Limitation of a Pathname to a Restricted Directo…8.8
• CVE-2021-31386A Protection Mechanism Failure vulnerability in the J-Web HT…5.9
• CVE-2021-31399On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can p…5.9
• CVE-2021-31400An issue was discovered in tcp_pulloutofband() in tcp_in.c i…7.5
• CVE-2021-31401An issue was discovered in tcp_rcv() in nptcp.c in HCC embed…7.5
• CVE-2021-31402The dio package 4.0.0 for Dart allows CRLF injection if the …7.5
• CVE-2021-31403Non-constant-time comparison of CSRF tokens in UIDL request …2.5
• CVE-2021-31404Non-constant-time comparison of CSRF tokens in UIDL request …2.5