Memory corruption

2010-04-0622:30:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.048 Low

EPSS

Percentile

92.5%

JSON

Linux kernel 2.6.18 through 2.6.33, and possibly other versions, allows remote attackers to cause a denial of service (memory corruption) via a large number of Bluetooth sockets, related to the size of sysfs files in (1) net/bluetooth/l2cap.c, (2) net/bluetooth/rfcomm/core.c, (3) net/bluetooth/rfcomm/sock.c, and (4) net/bluetooth/sco.c.

CPENameOperatorVersion
linux_kerneleq2.6.27.29
linux_kerneleq2.6.27.12
linux_kerneleq2.6.20.6
linux_kerneleq2.6.32.5
linux_kerneleq2.6.20.9
linux_kerneleq2.6.23.4
linux_kerneleq2.6.22.15
linux_kerneleq2.6.18.7
linux_kerneleq2.6.27.3
linux_kerneleq2.6.31

Name	Operator	Version
linux_kernel	eq	2.6.27.29
linux_kernel	eq	2.6.27.12
linux_kernel	eq	2.6.20.6
linux_kernel	eq	2.6.32.5
linux_kernel	eq	2.6.20.9
linux_kernel	eq	2.6.23.4
linux_kernel	eq	2.6.22.15
linux_kernel	eq	2.6.18.7
linux_kernel	eq	2.6.27.3
linux_kernel	eq	2.6.31