Published: 06/09/2005 Updated: 07/11/2023

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 215

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and previous versions allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.6.11
linux linux kernel 2.6.5
linux linux kernel 2.6.1
linux linux kernel 2.6.13
linux linux kernel 2.6.10
linux linux kernel 2.6.3
linux linux kernel 2.6.4
linux linux kernel 2.6.2
linux linux kernel 2.6.8
linux linux kernel 2.6.0
linux linux kernel 2.6.7
linux linux kernel 2.6.9
linux linux kernel 2.6.6
linux linux kernel 2.6.12

Synopsis kernel security update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix several security issues in the Red HatEnterprise Linux 4 kernel are now available This security advisory has been rated as having important security impactby the Red Hat Security Response Team ...

Oleg Nesterov discovered a local Denial of Service vulnerability in the timer handling When a non group-leader thread called exec() to execute a different program while an itimer was pending, the timer expiry would signal the old group leader task, which did not exist any more This caused a kernel panic This vulnerability only affects Ubuntu 50 ...

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2004-1017 Multiple overflows exist in the io_edgeport driver which might be usable as a denial of ...

source: wwwsecurityfocuscom/bid/14790/info The Linux kernel is prone to a denial-of-service vulnerability The kernel is affected by a memory leak, which eventually can result in a denial of service A local attacker can exploit this vulnerability by making repeated reads to the '/proc/scsi/sg/devices' file, which will exhaust kernel mem ...

CWE-399 http://secunia.com/advisories/17918 http://www.securityfocus.com/bid/14790 http://www.redhat.com/support/errata/RHSA-2006-0101.html http://secunia.com/advisories/18510 http://www.debian.org/security/2006/dsa-1017 http://secunia.com/advisories/17826 http://secunia.com/advisories/19374 http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9954 http://www.securityfocus.com/archive/1/427980/100/0/threaded http://www.securityfocus.com/archive/1/419522/100/0/threaded http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=729d70f5dfd663b44bca68a4479c96bde7e535d6 https://access.redhat.com/errata/RHSA-2006:0101 https://usn.ubuntu.com/178-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/26248/

CVE-2005-2800

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect