CVE-2026-18728 - Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing
Brief
CVE ID : CVE-2026-18728
Published : Aug. 13, 2026, 4:17 a. m.
- 4 hours, 47 minutes ago
Description : A flaw was found in open-iscsi. An integer underflow vulnerability in the `iscsiuio` component, specifically during IPv4 Dynamic Host Configuration Protocol (DHCP) parsing, allows a remote attacker on the same local network segment to cause a denial of service. By sending a specially crafted IPv4/UDP DHCP reply, the attacker can trigger an out-of-bounds read, leading to the `iscsiuio` process crashing.
This issue affects systems where `iscsiuio` is actively handling IPv4 DHCP traffic.
Severity: 6.5
- MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...