Linux Kernel L2CAP和HCI Setsockopt内存泄露信息泄露漏洞

Linux是一款开放源代码的操作系统。 Linux蓝牙部分的L2CAP和HCI setsockopt存在信息泄露问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Linux kernel 2.4.34 Linux kernel 2.4.34 Linux kernel 2.4.34 Linux kernel 2.4.33 2 Linux kernel 2.4.33 .7 Linux kernel 2.4.33 .6 Linux kernel 2.4.33 .6 Linux kernel 2.4.33 .5 Linux kernel 2.4.33 .4 Lin...

Stack overflow

The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copyfromuser function accessing an uninitialized stack buffer...

CVE-2007-1353

The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copyfromuser function accessing an uninitialized stack buffer...

CVE-2006-3146

The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service reboot via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was...

Toshiba bluetooth stack buffer overflow

"BlueSmack" attack L2CAP echo request large payload causes buffer overflow...

Ubuntu 4.10 / 5.04 / 5.10 : bluez-hcidump vulnerability (USN-256-1)

Pierre Betouin discovered a Denial of Service vulnerability in the handling of the L2CAP Logical Link Control and Adaptation Layer Protocol layer. By sending a specially crafted L2CAP packet through a wireless Bluetooth connection, a remote attacker could crash hcidump. Since hcidump is mainly a...

USN-256-1: bluez-hcidump vulnerability

Pierre Betouin discovered a Denial of Service vulnerability in the handling of the L2CAP Logical Link Control and Adaptation Layer Protocol layer. By sending a specially crafted L2CAP packet through a wireless Bluetooth connection, a remote attacker could crash hcidump. Since hcidump is mainly a...

CVE-2006-0797

The CVE-2006-0797 entry concerns Nokia N70 devices where a remote attacker can cause a denial of service (reboot or shutdown) via a malformed L2CAP packet over Bluetooth. The root cause is a mismatch: the packet length field is shorter than the actual packet, which can trigger a buffer overflow i...

Buffer overflow

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...

CVE-2006-0670

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...

CVE-2006-0671

Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service reboot or shutdown through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet whose length field is less than the...

CVE-2006-0670

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...

CVE-2006-0670

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...

CVE-2006-0670

CVE-2006-0670 is a buffer overflow in bluez-hcidump’s l2cap.c (hcidump 1.29) allowing a remote attacker to crash the system via a malformed L2CAP packet over Bluetooth. Debian/Ubuntu advisories document remote DoS with bluez-hcidump and show fixed/upgraded packages (e.g., bluez-hcidump 1.17-1sarg...

Sony/Ericsson Bluetooth (Reset Display) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ================================================================= Sony/Ericsson Bluetooth Reset Display Denial of Service Exploit ================================================================= / Sony/Ericsson reset display - PoC / / Pierre...

[ Secuobs - Tools release ] BSS (Bluetooth Stack Smasher) fuzzer

Software BSS - Bluetooth Stack Smasher Version 0.6 Location BSS could be downloaded on http://www.secuobs.com/news/05022006-bluetooth10.shtml Credits Pierre Betouin - [email protected] Bug was found on following devices : hcidump, Sony/ericsson K600i/V600i/W800i, Nokia N70 & SAMSUNG E73...

[ Secuobs - Advisory ] Bluetooth : DoS on Sony/Ericsson cell phones

Software affected Bluetooth Stack on Sony/Ericsson cell phones Version Sony/Ericsson K600i, V600i, W800i, T68i and certainly other models Impact Bluetooth Stack Denial of Service may be more - may be a rootkit : - Phone DoS reboot or shutdown - White screen bug freeze sleeping Credits Pierre...

Sony/Ericsson Bluetooth (Reset Display) Denial of Service Exploit

No description provided by source. / Sony/Ericsson reset display - PoC / / Pierre BETOUIN - [email protected] / / 05-02-2006 / / Vulnerability found using BSS fuzzer : / / Download www.secuobs.com/news/05022006-bluetooth10.shml / / / / Causes anormal behaviours on some Sony/Ericsson / /...

Sony/Ericsson Bluetooth - Reset Display Denial of Service

/ Sony/Ericsson reset display - PoC / / Pierre BETOUIN - [email protected] / / 05-02-2006 / / Vulnerability found using BSS fuzzer : / / Download www.secuobs.com/news/05022006-bluetooth10.shml / / / / Causes anormal behaviours on some Sony/Ericsson / / cell phones / / Vulnerable tested...