The vulnerabilities of the functions qla4xxx_set_chap_entry() and qla4xxx_iface_set_param() in the driver module drivers/scsi/qla4xxx/ql4_os.c of the Linux SCSI device driver allow a hacker to cause a service failure.

The vulnerabilities of the functions qla4xxxsetchapentry and qla4xxxifacesetparam in the driver module drivers/scsi/qla4xxx/ql4os.c of the Linux SCSI device driver involve reading memory beyond the allocated buffer. Exploiting these vulnerabilities could allow an attacker to cause a service failu...