CVE-2026-55995

Awaiting Analysis Awaiting Analysis - Queue

Double Free Vulnerability in open-iscsi Allows DoS via MITM Attack

Publication date: 2026-07-29

Last updated on: 2026-07-29

Assigner: SUSE

Description

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-29

Last Modified

2026-07-29

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-55995

Affected Vendors & Products

Vendor	Product	Version / Range
open-iscsi	open-iscsi	From ? (inc) to 56718d4e9d1a4f51c30697b5c0534144bb41c9bb (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-415	The product calls free() twice on the same memory address.

Attack-Flow Graph

Executive Summary

This is a Double Free vulnerability in open-iscsi that allows an unauthenticated man-in-the-middle attacker to cause a denial of service by exploiting a flaw in the software's memory management.

Detection Guidance

The provided CVE data does not include specific detection methods or commands for identifying this Double Free vulnerability in open-iscsi. General detection would involve monitoring for crashes or unusual behavior in open-iscsi services and checking for known vulnerable versions.

Impact Analysis

An attacker could exploit this to crash systems running vulnerable versions of open-iscsi, leading to service disruptions and potential data loss.

Compliance Impact

The vulnerability is a Double Free issue in open-iscsi that allows an unauthenticated MITM attacker to cause a denial of service. This could potentially disrupt systems handling sensitive data, but the provided text does not specify direct impacts on compliance with GDPR or HIPAA.

Mitigation Strategies

Update open-iscsi to a version beyond 56718d4e9d1a4f51c30697b5c0534144bb41c9bb to address the Double Free vulnerability. If updating is not immediately possible, consider disabling the service if it is not required.

Hi! I’m here to help you understand CVE-2026-55995. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70