exploitDog

CVE-2017-14051

Опубликовано: 31 авг. 2017

Источник: nvd

CVSS3: 4.4

CVSS2: 4.9

EPSS Низкий

Описание

An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access.

Ссылки

http://www.securityfocus.com/bid/100571
https://bugzilla.kernel.org/show_bug.cgi?id=194061
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
https://patchwork.kernel.org/patch/9929625/
Patch
Third Party Advisory
https://usn.ubuntu.com/3583-1/
https://usn.ubuntu.com/3583-2/
http://www.securityfocus.com/bid/100571
https://bugzilla.kernel.org/show_bug.cgi?id=194061
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
https://patchwork.kernel.org/patch/9929625/
Patch
Third Party Advisory
https://usn.ubuntu.com/3583-1/
https://usn.ubuntu.com/3583-2/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 4.12.10 (включая)

EPSS

Процентиль: 8%

0.00033

Низкий

4.4 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVE-2017-14051

CVSS3: 4.4

ubuntu

почти 8 лет назад

An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access.

CVE-2017-14051

CVSS3: 5.5

redhat

почти 8 лет назад

An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access.

CVE-2017-14051

CVSS3: 4.4

debian

почти 8 лет назад

An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in ...

GHSA-8ghc-95q8-w6ph

CVSS3: 4.4

github

около 3 лет назад

An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access.

openSUSE-SU-2017:2384-1

suse-cvrf

почти 8 лет назад

Security update for the Linux Kernel

EPSS

Процентиль: 8%

0.00033

Низкий

4.4 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-190