CVE-2005-2800

2005-09-0600:00:00

ubuntu.com

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.001

Percentile

23.1%

JSON

Memory leak in the seq_file implementation in the SCSI procfs interface
(sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a
denial of service (memory consumption) via certain repeated reads from the
/proc/scsi/sg/devices file, which is not properly handled when the next()
iterator returns NULL or an error.