CVE-2017-14051

An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access.

• CWE-190

• http://www.securityfocus.com/bid/100571
• https://bugzilla.kernel.org/show_bug.cgi?id=194061Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
• https://patchwork.kernel.org/patch/9929625/Patch, Third Party Advisory
• https://usn.ubuntu.com/3583-1/
• https://usn.ubuntu.com/3583-2/
• http://www.securityfocus.com/bid/100571
• https://bugzilla.kernel.org/show_bug.cgi?id=194061Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
• https://patchwork.kernel.org/patch/9929625/Patch, Third Party Advisory
• https://usn.ubuntu.com/3583-1/
• https://usn.ubuntu.com/3583-2/

Published

Aug 31, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14041A stack-based buffer overflow was discovered in the pgxtoima…8.8
• CVE-2017-14042A memory allocation failure was discovered in the ReadPNMIma…
• CVE-2017-14048BlackCat CMS 1.2 allows remote authenticated users to inject…
• CVE-2017-14049In BlackCat CMS 1.2, backend/settings/ajax_save_settings.php…
• CVE-2017-1405IBM Security Identity Manager Virtual Appliance 7.0 processe…4.4
• CVE-2017-14050In BlackCat CMS 1.2, backend/addons/install.php allows remot…
• CVE-2017-14053NetApp OnCommand Unified Manager for Clustered Data ONTAP be…
• CVE-2017-14054In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_he…
• CVE-2017-14055In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_hea…
• CVE-2017-14056In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_head…
• CVE-2017-14057In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of a…
• CVE-2017-14058In FFmpeg 2.4 and 3.3.3, the read_data function in libavform…