What is GHSA-phc9-9w6c-6974?

GHSA-phc9-9w6c-6974 is a security advisory published by GitHub Security Advisories with High severity. A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly...

Which CVE IDs does GHSA-phc9-9w6c-6974 cover?

GHSA-phc9-9w6c-6974 covers the following CVE IDs: CVE-2026-115484. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-phc9-9w6c-6974?

GHSA-phc9-9w6c-6974 has a CVSS v3 base score of 7.6, published by GitHub Security Advisories.

GHSA-phc9-9w6c-6974HighCVSS 7.6

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly...

Vendor

GitHub Security Advisories

Published

October 23, 2026

Last Modified

October 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-115484 →

📋 Description

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the daemon or corrupt its network configuration.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-115484
https://access.redhat.com/security/cve/CVE-2026-115484
https://bugzilla.redhat.com/show_bug.cgi?id=2556265
https://github.com/advisories/GHSA-phc9-9w6c-6974