NetSight
IP …
medium4.6

CVE-2015-5707

Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of ser…

Impact

Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.0 before 4.1.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04
DebianDebian Linux
Versions 7.0, 8.0
SuseSuse Linux Enterprise Desktop
Version 11
SuseSuse Linux Enterprise Server
Version 11

Weakness classification

CWE-190

References