PT-2012-1506 · Linux+2 · Linux Kernel+2

Gustavo F. Padovan

+2

·

Published

2011-05-10

·

Updated

2023-02-13

·

CVE-2011-1079

CVSS v2.0

5.4

Medium

VectorAV:L/AC:M/Au:N/C:P/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39
Description The issue allows local users to obtain potentially sensitive information from kernel stack memory or cause a denial of service, resulting in a system crash. This is due to the bnep sock ioctl function in net/bluetooth/bnep/sock.c not ensuring that a certain device field ends with a '0' character, which can be exploited via a BNEPCONNADD command.
Recommendations For Linux kernel versions prior to 2.6.39, update to version 2.6.39 or later to resolve the issue. As a temporary workaround, consider restricting access to the bnep sock ioctl function to minimize the risk of exploitation.

Fix

DoS

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2019-1791
ALT-PU-2019-1792
ALT-PU-2019-1793
ALT-PU-2019-1794
CVE-2011-1079
DSA-2240-1
DSA-2264-1
RHSA-2011:0498
RHSA-2011:0500
RHSA-2011:0833
RHSA-2011_0498
RHSA-2011_0833

Affected Products

Alt Linux
Linux Kernel
Red Hat