Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hjfq-c3jw-r92p

Опубликовано: 18 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.

EPSS

Процентиль: 20%
0.00063
Низкий

8 High

CVSS3

Дефекты

CWE-119
CWE-362
CWE-416

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 2 лет назад

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.

CVSS3: 7.1
redhat
больше 2 лет назад

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.

CVSS3: 5.5
nvd
больше 2 лет назад

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.

CVSS3: 5.5
debian
больше 2 лет назад

A vulnerability classified as critical was found in Linux Kernel. Affe ...

suse-cvrf
больше 2 лет назад

Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP2)

EPSS

Процентиль: 20%
0.00063
Низкий

8 High

CVSS3

Дефекты

CWE-119
CWE-362
CWE-416