Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-14991
HistoryOct 04, 2017 - 1:29 a.m.

Design/Logic Flaw

2017-10-0401:29:00
PRIOn knowledge base
www.prio-n.com
7

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive information from uninitialized kernel heap-memory locations via an SG_GET_REQUEST_TABLE ioctl call for /dev/sg0.

CPENameOperatorVersion
linux_kernelle4.13.3

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%