PT-2013-1017 · Linux+3 · Linux Kernel+3

Mathias Krause + 1 · Published 2013-03-07 · Updated 2019-04-22 · CVE-2012-6544

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6

Description The Bluetooth protocol stack in the Linux kernel does not properly initialize certain structures, allowing local users to obtain sensitive information from kernel stack memory via a crafted application that targets the L2CAP or HCI implementation.

Recommendations For Linux kernel versions prior to 3.6, update to version 3.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the L2CAP and HCI implementations until a patch is available.

Fix

RCE

Information Disclosure

Weakness Enumeration

CWE-20

CWE-200

Related Identifiers

BDU:2014-00077

CESA-2013_1173

CVE-2012-6544

DSA-2668-1

RHSA-2013:1034

RHSA-2013:1173

RHSA-2013:1195

RHSA-2013_1034

RHSA-2013_1173

SUSE-SU-2015:0652-1

USN-1599-1

USN-1610-1

USN-1648-1

USN-1649-1

USN-1652-1

USN-1805-1

USN-1808-1

Affected Products

Centos

Linux Kernel

Red Hat

Suse

References · 32

• https://bdu.fstec.ru/vul/2014-00077 · Security Note
• https://linux.oracle.com/errata/ELSA-2013-1173.html · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2 · Patch
• http://ubuntu.com/usn/USN-1805-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1173.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-6544 · Security Note
• https://ubuntu.com/security/notices/USN-1652-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2013-2542.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-6544 · Vendor Advisory
• http://ubuntu.com/usn/USN-1808-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2013-2543.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6544 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2012-6544 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1805-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-6544 · Vendor Advisory