NetSight
high7.5

CVE-2021-28361

An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01.

Impact

An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with a zero length (but data is expected), the iSCSI target can crash with a NULL pointer dereference.

Affected products

VendorProductAffected versions
SpdkStorage Performance Development Kit
before 20.01.01

Weakness classification

References