This vulnerability is a double‑free flaw in the iSNS attribute decoder that allows an unauthenticated man‑in‑the‑middle attacker to trigger a denial of service by corrupting memory. The double free directly leads to a crash of the iSCSI initiator or target, resulting in service interruption. The weakness is represented by CWE‑415 (Double Free) and CWE‑763 (Memory Management Exceeded Boundary).

The flaw affects all releases of open‑iscsi prior to the commit identified as 56718d4e9d1a4f51c30697b5c0534144bb41c9bb. These include the default iSCSI initiator and target implementations provided by the open‑iscsi project.

The CVSS score of 8.7 indicates high severity. Although the EPSS score is reported as less than 1% and the vulnerability is not listed in CISA’s KEV catalog, the attack vector is inferred to be network‑based, allowing a remote, unauthenticated attacker to perform a man‑in‑the‑middle operation and trigger the service crash. Given the nature of the error, exploitation requires a network path to the iSNS service and can be achieved without authentication, making the risk significant for exposed systems.