[kernel-sec-discuss] r880 - active

[jmm at alioth.debian.org]

Author: jmm
Date: 2007-07-04 07:00:20 +0000 (Wed, 04 Jul 2007)
New Revision: 880

Added:
   active/CVE-2007-3513
Log:
new issue


Added: active/CVE-2007-3513
===================================================================
--- active/CVE-2007-3513	                        (rev 0)
+++ active/CVE-2007-3513	2007-07-04 07:00:20 UTC (rev 880)
@@ -0,0 +1,17 @@
+Candidate: CVE-2007-3513
+References: 
+Description: 
+ The lcd_write function in drivers/usb/misc/usblcd.c in the Linux kernel
+ before 2.6.22-rc7 does not limit the amount of memory used by a caller,
+ which allows local users to cause a denial of service (memory consumption). 
+Ubuntu-Description: 
+Notes: 
+Bugs: 
+upstream: released (2.6.22-rc7)
+linux-2.6: 
+2.6.18-etch-security: 
+2.6.8-sarge-security: 
+2.4.27-sarge-security: 
+2.6.15-dapper-security: 
+2.6.17-edgy-security: 
+2.6.20-feisty-security: