Security Advisory

CVE-2005-2800

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2005-09-06 04:00:00
Last updated 2024-08-07 22:45:02
Assigner mitre
State PUBLISHED

Description

Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error.