{
	"document":{
		"aggregate_severity":{
			"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
			"text":"High"
		},
		"category":"csaf_vex",
		"csaf_version":"2.0",
		"distribution":{
			"tlp":{
				"label":"WHITE",
				"url":"https:/www.first.org/tlp/"
			}
		},
		"lang":"en",
		"notes":[
			{
				"text":"open-iscsi security update",
				"category":"general",
				"title":"Synopsis"
			},
			{
				"text":"An update for open-iscsi is now available for openEuler-24.03-LTS-SP1",
				"category":"general",
				"title":"Summary"
			},
			{
				"text":"The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.\n\nSecurity Fix(es):\n\nA stack buffer overflow vulnerability exists in the idbm_recinfo_config() function in open-iscsi (iscsi-initiator-utils). An attacker can craft a malicious SendTargets TargetName containing newline characters and oversized injected keys or values to inject extra configuration lines into persisted node records. When the record is reparsed, due to missing bounds checking, a stack buffer overflow occurs, leading to denial of service or potential memory corruption. The affected component is usr/idbm.c:idbm_recinfo_config in iscsi-initiator-utils, with attacker-controlled input reaching it through SendTargets handling in usr/discovery.c.(CVE-2026-18724)",
				"category":"general",
				"title":"Description"
			},
			{
				"text":"An update for open-iscsi is now available for openEuler-24.03-LTS-SP1.\n\nopenEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.",
				"category":"general",
				"title":"Topic"
			},
			{
				"text":"High",
				"category":"general",
				"title":"Severity"
			},
			{
				"text":"open-iscsi",
				"category":"general",
				"title":"Affected Component"
			}
		],
		"publisher":{
			"issuing_authority":"openEuler security committee",
			"name":"openEuler",
			"namespace":"https://www.openeuler.org",
			"contact_details":"openeuler-security@openeuler.org",
			"category":"vendor"
		},
		"references":[
			{
				"summary":"openEuler-SA-2026-3513",
				"category":"self",
				"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3513"
			},
			{
				"summary":"CVE-2026-18724",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-18724&packageName=open-iscsi"
			},
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18724"
			},
			{
				"summary":"openEuler-SA-2026-3513 vex file",
				"category":"self",
				"url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-3513.json"
			}
		],
		"title":"An update for open-iscsi is now available for openEuler-24.03-LTS-SP1",
		"tracking":{
			"initial_release_date":"2026-09-02T09:26:56+08:00",
			"revision_history":[
				{
					"date":"2026-09-02T09:26:56+08:00",
					"summary":"Initial",
					"number":"1.0.0"
				}
			],
			"generator":{
				"date":"2026-09-02T09:26:56+08:00",
				"engine":{
					"name":"openEuler CSAF Tool V1.0"
				}
			},
			"current_release_date":"2026-09-02T09:26:56+08:00",
			"id":"openEuler-SA-2026-3513",
			"version":"1.0.0",
			"status":"final"
		}
	},
	"product_tree":{
		"branches":[
			{
				"name":"openEuler",
				"category":"vendor",
				"branches":[
					{
						"name":"openEuler",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openEuler-24.03-LTS-SP1",
									"name":"openEuler-24.03-LTS-SP1"
								},
								"name":"openEuler-24.03-LTS-SP1",
								"category":"product_version"
							}
						],
						"category":"product_name"
					},
					{
						"name":"aarch64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"open-iscsi-2.1.5-18.oe2403sp1.aarch64.rpm",
									"name":"open-iscsi-2.1.5-18.oe2403sp1.aarch64.rpm"
								},
								"name":"open-iscsi-2.1.5-18.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"open-iscsi-debuginfo-2.1.5-18.oe2403sp1.aarch64.rpm",
									"name":"open-iscsi-debuginfo-2.1.5-18.oe2403sp1.aarch64.rpm"
								},
								"name":"open-iscsi-debuginfo-2.1.5-18.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"open-iscsi-debugsource-2.1.5-18.oe2403sp1.aarch64.rpm",
									"name":"open-iscsi-debugsource-2.1.5-18.oe2403sp1.aarch64.rpm"
								},
								"name":"open-iscsi-debugsource-2.1.5-18.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"open-iscsi-devel-2.1.5-18.oe2403sp1.aarch64.rpm",
									"name":"open-iscsi-devel-2.1.5-18.oe2403sp1.aarch64.rpm"
								},
								"name":"open-iscsi-devel-2.1.5-18.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"open-iscsi-help-2.1.5-18.oe2403sp1.aarch64.rpm",
									"name":"open-iscsi-help-2.1.5-18.oe2403sp1.aarch64.rpm"
								},
								"name":"open-iscsi-help-2.1.5-18.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"src",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"open-iscsi-2.1.5-18.oe2403sp1.src.rpm",
									"name":"open-iscsi-2.1.5-18.oe2403sp1.src.rpm"
								},
								"name":"open-iscsi-2.1.5-18.oe2403sp1.src.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"x86_64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"open-iscsi-2.1.5-18.oe2403sp1.x86_64.rpm",
									"name":"open-iscsi-2.1.5-18.oe2403sp1.x86_64.rpm"
								},
								"name":"open-iscsi-2.1.5-18.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"open-iscsi-debuginfo-2.1.5-18.oe2403sp1.x86_64.rpm",
									"name":"open-iscsi-debuginfo-2.1.5-18.oe2403sp1.x86_64.rpm"
								},
								"name":"open-iscsi-debuginfo-2.1.5-18.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"open-iscsi-debugsource-2.1.5-18.oe2403sp1.x86_64.rpm",
									"name":"open-iscsi-debugsource-2.1.5-18.oe2403sp1.x86_64.rpm"
								},
								"name":"open-iscsi-debugsource-2.1.5-18.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"open-iscsi-devel-2.1.5-18.oe2403sp1.x86_64.rpm",
									"name":"open-iscsi-devel-2.1.5-18.oe2403sp1.x86_64.rpm"
								},
								"name":"open-iscsi-devel-2.1.5-18.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"open-iscsi-help-2.1.5-18.oe2403sp1.x86_64.rpm",
									"name":"open-iscsi-help-2.1.5-18.oe2403sp1.x86_64.rpm"
								},
								"name":"open-iscsi-help-2.1.5-18.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					}
				]
			}
		],
		"relationships":[
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"open-iscsi-2.1.5-18.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:open-iscsi-2.1.5-18.oe2403sp1.aarch64",
					"name":"open-iscsi-2.1.5-18.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"open-iscsi-debuginfo-2.1.5-18.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:open-iscsi-debuginfo-2.1.5-18.oe2403sp1.aarch64",
					"name":"open-iscsi-debuginfo-2.1.5-18.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"open-iscsi-debugsource-2.1.5-18.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:open-iscsi-debugsource-2.1.5-18.oe2403sp1.aarch64",
					"name":"open-iscsi-debugsource-2.1.5-18.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"open-iscsi-devel-2.1.5-18.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:open-iscsi-devel-2.1.5-18.oe2403sp1.aarch64",
					"name":"open-iscsi-devel-2.1.5-18.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"open-iscsi-help-2.1.5-18.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:open-iscsi-help-2.1.5-18.oe2403sp1.aarch64",
					"name":"open-iscsi-help-2.1.5-18.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"open-iscsi-2.1.5-18.oe2403sp1.src.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:open-iscsi-2.1.5-18.oe2403sp1.src",
					"name":"open-iscsi-2.1.5-18.oe2403sp1.src as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"open-iscsi-2.1.5-18.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:open-iscsi-2.1.5-18.oe2403sp1.x86_64",
					"name":"open-iscsi-2.1.5-18.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"open-iscsi-debuginfo-2.1.5-18.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:open-iscsi-debuginfo-2.1.5-18.oe2403sp1.x86_64",
					"name":"open-iscsi-debuginfo-2.1.5-18.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"open-iscsi-debugsource-2.1.5-18.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:open-iscsi-debugsource-2.1.5-18.oe2403sp1.x86_64",
					"name":"open-iscsi-debugsource-2.1.5-18.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"open-iscsi-devel-2.1.5-18.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:open-iscsi-devel-2.1.5-18.oe2403sp1.x86_64",
					"name":"open-iscsi-devel-2.1.5-18.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"open-iscsi-help-2.1.5-18.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:open-iscsi-help-2.1.5-18.oe2403sp1.x86_64",
					"name":"open-iscsi-help-2.1.5-18.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			}
		]
	},
	"vulnerabilities":[
		{
			"cve":"CVE-2026-18724",
			"notes":[
				{
					"text":"A stack buffer overflow vulnerability exists in the idbm_recinfo_config() function in open-iscsi (iscsi-initiator-utils). An attacker can craft a malicious SendTargets TargetName containing newline characters and oversized injected keys or values to inject extra configuration lines into persisted node records. When the record is reparsed, due to missing bounds checking, a stack buffer overflow occurs, leading to denial of service or potential memory corruption. The affected component is usr/idbm.c:idbm_recinfo_config in iscsi-initiator-utils, with attacker-controlled input reaching it through SendTargets handling in usr/discovery.c.",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS-SP1:open-iscsi-2.1.5-18.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:open-iscsi-debuginfo-2.1.5-18.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:open-iscsi-debugsource-2.1.5-18.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:open-iscsi-devel-2.1.5-18.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:open-iscsi-help-2.1.5-18.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:open-iscsi-2.1.5-18.oe2403sp1.src",
					"openEuler-24.03-LTS-SP1:open-iscsi-2.1.5-18.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:open-iscsi-debuginfo-2.1.5-18.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:open-iscsi-debugsource-2.1.5-18.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:open-iscsi-devel-2.1.5-18.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:open-iscsi-help-2.1.5-18.oe2403sp1.x86_64"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS-SP1:open-iscsi-2.1.5-18.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:open-iscsi-debuginfo-2.1.5-18.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:open-iscsi-debugsource-2.1.5-18.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:open-iscsi-devel-2.1.5-18.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:open-iscsi-help-2.1.5-18.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:open-iscsi-2.1.5-18.oe2403sp1.src",
						"openEuler-24.03-LTS-SP1:open-iscsi-2.1.5-18.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:open-iscsi-debuginfo-2.1.5-18.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:open-iscsi-debugsource-2.1.5-18.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:open-iscsi-devel-2.1.5-18.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:open-iscsi-help-2.1.5-18.oe2403sp1.x86_64"
					],
					"details":"open-iscsi security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3513"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"HIGH",
						"baseScore":7.6,
						"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS-SP1:open-iscsi-2.1.5-18.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:open-iscsi-debuginfo-2.1.5-18.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:open-iscsi-debugsource-2.1.5-18.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:open-iscsi-devel-2.1.5-18.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:open-iscsi-help-2.1.5-18.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:open-iscsi-2.1.5-18.oe2403sp1.src",
						"openEuler-24.03-LTS-SP1:open-iscsi-2.1.5-18.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:open-iscsi-debuginfo-2.1.5-18.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:open-iscsi-debugsource-2.1.5-18.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:open-iscsi-devel-2.1.5-18.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:open-iscsi-help-2.1.5-18.oe2403sp1.x86_64"
					]
				}
			],
			"threats":[
				{
					"details":"High",
					"category":"impact"
				}
			],
			"title":"CVE-2026-18724"
		}
	]
}