CVE-2026-18727
Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing
- State
- Published
- Severity
- 6.5 Medium
- Published
- Aug 12, 2026
- Updated
- Aug 18, 2026
- Reserved
- Aug 3, 2026
Description
A flaw was found in open-iscsi's iscsiuio component. This vulnerability involves an integer underflow and out-of-bounds read during Dynamic Host Configuration Protocol for IPv6 (DHCPv6) packet parsing. Specifically, crafted DHCPv6 Advertise traffic with a short User Datagram Protocol (UDP) length can cause the DHCPv6 payload length to underflow. An unauthenticated attacker on an adjacent network segment can exploit this by sending specially crafted IPv6 UDP traffic while the client is in an active DHCPv6 exchange, leading to a denial of service due to a process crash or service disruption.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | redhat |
Weaknesses
- CWE-191 Integer Underflow (Wrap or Wraparound)
Affected Products
| Product | Versions |
|---|---|
Red Hat Enterprise Linux 10Red Hat | |
Red Hat Enterprise Linux 9Red Hat |
References
- https://access.redhat.com/security/cve/CVE-2026-18727vdb-entry
- RHBZ#2462956issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.