NetSight
IP …
high7.8

CVE-2017-7187

The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based buffer overflow) or …

Impact

The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.18.50
from 3.19 before 4.1.40
from 4.2 before 4.4.60
from 4.5 before 4.9.21
from 4.10 before 4.10.9

Weakness classification

CWE-119

References