CVE-2005-2800

Description

Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error.

Primary references

• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Permissions Required, Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org
• cve@mitre.org — Broken Link
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org — Not Applicable
• cve@mitre.org
• cve@mitre.org