CVE-2017-14051
Description
An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access.
Risk Information
Base Score
4.4
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.115
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Linux kernel (USN-3444-1) linux-image-aws_4.4.0.1039.41_amd64.deb | Linux |
| Linux kernel (USN-3469-1) linux-image-4.4.0-1009-kvm_4.4.0-1009.14_amd64.deb | Linux |
| Linux kernel (USN-3469-1) linux-image-4.4.0-1033-gke_4.4.0-1033.33_amd64.deb | Linux |
| Linux kernel (USN-3469-1) linux-image-4.4.0-1039-aws_4.4.0-1039.48_amd64.deb | Linux |
| Linux kernel (USN-3469-1) linux-image-4.4.0-98-generic_4.4.0-98.121_i386.deb | Linux |
| Linux kernel (USN-3469-1) linux-image-4.4.0-98-generic_4.4.0-98.121_amd64.deb | Linux |
| Linux kernel (USN-3469-1) linux-image-4.4.0-98-lowlatency_4.4.0-98.121_i386.deb | Linux |
| Linux kernel (USN-3469-1) linux-image-4.4.0-98-lowlatency_4.4.0-98.121_amd64.deb | Linux |
| Linux hardware enablement kernel from Xenial for Trusty (USN-3469-2) linux-image-4.4.0-98-generic_4.4.0-98.121~14.04.1_i386.deb | Linux |
| Linux hardware enablement kernel from Xenial for Trusty (USN-3469-2) linux-image-4.4.0-98-generic_4.4.0-98.121~14.04.1_amd64.deb | Linux |
| Linux hardware enablement kernel from Xenial for Trusty (USN-3469-2) linux-image-4.4.0-98-lowlatency_4.4.0-98.121~14.04.1_i386.deb | Linux |
| Linux hardware enablement kernel from Xenial for Trusty (USN-3469-2) linux-image-4.4.0-98-lowlatency_4.4.0-98.121~14.04.1_amd64.deb | Linux |
| Dtrace-modules-3.8.13-118.29.1.el6uek update (ELSA-2019-4316) dtrace-modules-3.8.13-118.29.1.el6uek-0.4.5-3.el6.x86_64.rpm | Linux |
| Dtrace-modules-3.8.13-118.29.1.el7uek update (ELSA-2019-4316) dtrace-modules-3.8.13-118.29.1.el7uek-0.4.5-3.el7.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234