Lucene search

K
cveRedhatCVE-2007-1353
HistoryApr 24, 2007 - 4:19 p.m.

CVE-2007-1353

2007-04-2416:19:00
redhat
web.nvd.nist.gov
38
cve-2007-1353
linux kernel
bluetooth
vulnerability
stack buffer
memory
sensitive information
security advisory

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

44.4%

The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer.

Affected configurations

Nvd
Node
linuxlinux_kernelRange2.4.34.2
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

References

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

44.4%