CVE-2005-2800

Name: CVE-2005-2800
Creator: NVD / NIST
Published: 2005-09-06T17:03:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.83%

Last modified Jun 16, 2026

CVE-2005-2800 is a vulnerability of currently unknown severity. Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error.. EPSS estimates a 0.83% chance of exploitation in the next 30 days.

Description

Memory leak in the seq_file implementation in the SCSI procfs interface (sg.c) in Linux kernel 2.6.13 and earlier allows local users to cause a denial of service (memory consumption) via certain repeated reads from the /proc/scsi/sg/devices file, which is not properly handled when the next() iterator returns NULL or an error.

Metrics

EPSS Probability

0.83%

52.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-399

Affected Software

Vendor	Product	Versions	Update
Linux	Linux Kernel	2.6.0	—
Linux	Linux Kernel	2.6.1	—
Linux	Linux Kernel	2.6.2	—
Linux	Linux Kernel	2.6.3	—
Linux	Linux Kernel	2.6.4	—
Linux	Linux Kernel	2.6.5	—
Linux	Linux Kernel	2.6.6	—
Linux	Linux Kernel	2.6.7	—
Linux	Linux Kernel	2.6.8	—
Linux	Linux Kernel	2.6.9	2.6.20
Linux	Linux Kernel	2.6.10	—
Linux	Linux Kernel	2.6.11	—
Linux	Linux Kernel	2.6.12	—
Linux	Linux Kernel	2.6.13	—

References

http://secunia.com/advisories/17826Permissions Required, Third Party Advisory
http://secunia.com/advisories/17918Permissions Required, Third Party Advisory
http://secunia.com/advisories/18510Permissions Required, Third Party Advisory
http://secunia.com/advisories/19374Permissions Required, Third Party Advisory
http://www.debian.org/security/2006/dsa-1017Third Party Advisory
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=729d70f5dfd663b44bca68a4479c96bde7e535d6
http://www.mandriva.com/security/advisories?name=MDKSA-2005:218Broken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220
http://www.redhat.com/support/errata/RHSA-2006-0101.htmlNot Applicable
http://www.securityfocus.com/archive/1/419522/100/0/threaded
http://www.securityfocus.com/archive/1/427980/100/0/threaded
http://www.securityfocus.com/bid/14790Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9954
http://secunia.com/advisories/17826Permissions Required, Third Party Advisory
http://secunia.com/advisories/17918Permissions Required, Third Party Advisory
http://secunia.com/advisories/18510Permissions Required, Third Party Advisory
http://secunia.com/advisories/19374Permissions Required, Third Party Advisory
http://www.debian.org/security/2006/dsa-1017Third Party Advisory
http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=729d70f5dfd663b44bca68a4479c96bde7e535d6
http://www.mandriva.com/security/advisories?name=MDKSA-2005:218Broken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2005:219
http://www.mandriva.com/security/advisories?name=MDKSA-2005:220
http://www.redhat.com/support/errata/RHSA-2006-0101.htmlNot Applicable
http://www.securityfocus.com/archive/1/419522/100/0/threaded
http://www.securityfocus.com/archive/1/427980/100/0/threaded
http://www.securityfocus.com/bid/14790Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9954

Timeline

Published: Sep 6, 2005
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2005-2800?

How severe is CVE-2005-2800?

Severity scoring for CVE-2005-2800 is pending analysis. The EPSS model estimates a 0.83% probability of exploitation in the next 30 days.

How do I fix CVE-2005-2800?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2005-2800?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST