CVE-2026-55995
Received
Received - Intake
Double Free Vulnerability in open-iscsi Allows DoS via MITM Attack
Vulnerability report for CVE-2026-55995, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-07-29
Last updated on: 2026-07-29
Assigner: SUSE
Description
Description
A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.
This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| open-iscsi | open-iscsi | From ? (inc) to 56718d4e9d1a4f51c30697b5c0534144bb41c9bb (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-415 | The product calls free() twice on the same memory address. |