Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-14991
2.1
LOWCVSS v2
Published
October 4, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive information from uninitialized kernel heap-memory locations via an SG_GET_REQUEST_TABLE ioctl call for /dev/sg0.
GitHub