VULNERABILITY INTELLIGENCE

CVE-2017-14051

CVSS score4.4 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2017-08-31
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Description

An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access.

Weakness classification

  • nvd@nist.gov: CWE-190

Primary references