Описание
The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.6.39-0.1 |
| hardy | released | 2.6.24-29.93 |
| lucid | released | 2.6.32-32.62 |
| maverick | released | 2.6.35-30.52 |
| natty | released | 2.6.38-9.43 |
| oneiric | not-affected | 2.6.39-0.1 |
| upstream | released | 2.6.39~rc1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| hardy | DNE | |
| lucid | released | 2.6.32-316.30 |
| maverick | ignored | end of life |
| natty | DNE | |
| oneiric | DNE | |
| upstream | released | 2.6.39~rc1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| hardy | DNE | |
| lucid | released | 2.6.31-610.27 |
| maverick | DNE | |
| natty | DNE | |
| oneiric | DNE | |
| upstream | released | 2.6.39~rc1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| hardy | DNE | |
| lucid | released | 2.6.35-30.54~lucid1 |
| maverick | DNE | |
| natty | DNE | |
| oneiric | DNE | |
| upstream | released | 2.6.39~rc1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| hardy | DNE | |
| lucid | released | 2.6.38-9.43~lucid1 |
| maverick | DNE | |
| natty | DNE | |
| oneiric | DNE | |
| upstream | released | 2.6.39~rc1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| hardy | DNE | |
| lucid | not-affected | |
| maverick | DNE | |
| natty | DNE | |
| oneiric | DNE | |
| upstream | released | 2.6.39~rc1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| hardy | DNE | |
| lucid | released | 2.6.32-217.34 |
| maverick | released | 2.6.32-417.34 |
| natty | DNE | |
| oneiric | DNE | |
| upstream | released | 2.6.39~rc1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.6.38-1309.13 |
| hardy | DNE | |
| lucid | DNE | |
| maverick | released | 2.6.35-903.23 |
| natty | released | 2.6.38-1209.13 |
| oneiric | not-affected | 2.6.38-1309.13 |
| upstream | released | 2.6.39~rc1 |
Показывать по
Ссылки на источники
EPSS
5.4 Medium
CVSS2
Связанные уязвимости
The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command.
The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command.
The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux ...
The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command.
ELSA-2019-4685: Unbreakable Enterprise kernel security update (IMPORTANT)
EPSS
5.4 Medium
CVSS2