Vulnerabilities > CVE-2021-28361 - NULL Pointer Dereference vulnerability in Spdk Storage Performance Development KIT

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
spdk
CWE-476
NVD
Published: 2021-03-13
Updated: 2021-03-18

Summary

An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with a zero length (but data is expected), the iSCSI target can crash with a NULL pointer dereference.

Vulnerable Configurations

Part Description Count
Application
Spdk
28

Common Weakness Enumeration (CWE)

References