#VU95247 Resource management errors in Linux kernel - CVE-2005-2800
Vulnerability identifier: #VU95247
Vulnerability risk: Low
CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/U:Clear]
CVE-ID:
CWE-ID:
CWE-399
Exploitation vector: Local
Exploit availability: Yes
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to perform service disruption.
Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error.
Mitigation
Install update from vendor's repository.
Vulnerable software versions
Linux kernel: All versions
External links
https://secunia.com/advisories/17826
https://secunia.com/advisories/17918
https://secunia.com/advisories/18510
https://secunia.com/advisories/19374
https://www.debian.org/security/2006/dsa-1017
https://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=729d70f5dfd663b44bca68a4479c96bde7e535d6
https://www.mandriva.com/security/advisories?name=MDKSA-2005:218
https://www.mandriva.com/security/advisories?name=MDKSA-2005:219
https://www.mandriva.com/security/advisories?name=MDKSA-2005:220
https://www.redhat.com/support/errata/RHSA-2006-0101.html
https://www.securityfocus.com/archive/1/419522/100/0/threaded
https://www.securityfocus.com/archive/1/427980/100/0/threaded
https://www.securityfocus.com/bid/14790
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9954
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
