-

CVE-2023-54179

scsi: qla2xxx: Array index may go out of bound

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Array index may go out of bound

Klocwork reports array 'vha->host_str' of size 16 may use index value(s)
16..19.  Use snprintf() instead of sprintf().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < e697f466bf61280b7e996c9ea096d7ec371c31ea
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < ea64c727f20123342020257cfa956fbfbd6d12ff
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < bcd773969a87d9802053c0db5be84abd6594a024
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 748d8f8698a2f48ffe32dd7b35dbab1810ed1f82
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 2b3bdef089b920b4a19fefb4f4e6dda56a4bb583
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < e934737e18ff069a66cd53cd7f7a0b34ae2c24fe
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < d721b591b95cf3f290f8a7cbe90aa2ee0368388d
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.12
Status affected
Version 0
Version < 2.6.12
Status unaffected
Version <= 4.19.*
Version 4.19.291
Status unaffected
Version <= 5.4.*
Version 5.4.253
Status unaffected
Version <= 5.10.*
Version 5.10.188
Status unaffected
Version <= 5.15.*
Version 5.15.121
Status unaffected
Version <= 6.1.*
Version 6.1.40
Status unaffected
Version <= 6.4.*
Version 6.4.5
Status unaffected
Version <= *
Version 6.5
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.144
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.