Description (CNA)
Out of bounds write and reads in openSeaChest’s --showSCSIDefects in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing defect information out of bounds for very large defects lists via a very bad drive with lots of defects or a maliciously crafted SCSI device’s defect response length.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 0 through 25.05.3; affected 26.03.0 |
CWE
CWE-787
References
- https://www.seagate.com/product-security/#security-advisories
- https://www.seagate.com/support/software/seachest/
ADP enrichment
No English description supplied.
No references supplied.