Description
Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/14790 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:220 ↗
- http://www.redhat.com/support/errata/RHSA-2006-0101.html ↗
- http://www.securityfocus.com/archive/1/419522/100/0/threaded ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9954 ↗
- http://secunia.com/advisories/18510 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:218 ↗
- http://secunia.com/advisories/17826 ↗
- http://secunia.com/advisories/17918 ↗
- http://www.securityfocus.com/archive/1/427980/100/0/threaded ↗
- http://www.debian.org/security/2006/dsa-1017 ↗
- http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=729d70f5dfd663b44bca68a4479c96bde7e535d6 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:219 ↗
- http://secunia.com/advisories/19374 ↗