blob: 9bd029278939dd066c792dc9e3a5b9a07afd8174 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
Candidate: CVE-2007-3513
References:
Description:
The lcd_write function in drivers/usb/misc/usblcd.c in the Linux kernel
before 2.6.22-rc7 does not limit the amount of memory used by a caller,
which allows local users to cause a denial of service (memory consumption).
Ubuntu-Description:
A flaw was discovered in the usblcd driver. A local attacker could cause
large amounts of kernel memory consumption, leading to a denial of service.
Notes:
Bugs:
upstream: released (2.6.22-rc7)
linux-2.6: released (2.6.22-1)
2.6.18-etch-security: released (2.6.18.dfsg.1-13etch1) [bugfix/usblcd-limit-memory-consumption.patch]
2.6.8-sarge-security: ignored (2.6.8-17sarge1) "Too different"
2.4.27-sarge-security: ignored (2.4.27-10sarge6) "Too different"
2.6.15-dapper-security: released (2.6.15-28.57)
2.6.17-edgy-security: released (2.6.17.1-12.40) [85816b5fa3476f3fcf7758a1bd338d69184085d7]
2.6.20-feisty-security: released (2.6.20-16.31) [165018c61779a357d33947a2ae169148b6ab8d9f]
|