Threats tagged 'ghsa-x944-xgqc-pphj'

A stack buffer overflow vulnerability exists in libstoragemgmt's _sg_parse_vpd_80() function when parsing SCSI Vital Product Data page 0x80. An attacker with local control over a storage device or virtual storage backend can supply malformed data with an untrusted page length field, causing a denial of service by crashing or destabilizing the querying process.