Threats tagged 'ghsa-q9p8-qgxc-hw66'

A vulnerability in open-iscsi's iscsiuio daemon allows a remote attacker on the same local network segment to cause a denial of service by sending a specially crafted ICMPv6 Router Advertisement with a zero-length option. This triggers an infinite loop, causing sustained CPU usage and rendering the daemon unresponsive. There is also a secondary risk of out-of-bounds reads with short IPv6 payloads, but no confirmed memory corruption or data exposure. Exploitation requires adjacency on the same Layer 2 network segment and IPv6-enabled interfaces handled by iscsiuio.