CVE-2021-28361 | BDVDB-2026-150433 Detail

Description#

An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with a zero length (but data is expected), the iSCSI target can crash with a NULL pointer dereference.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/spdk/spdk/releases/tag/v21.01.1

Exploit#

No public exploit known

History#

Version 12021-03-13Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.