Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 29, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.38-12-omapUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-35-sparc64-smpUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.32-35-versatileUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-319-ec2Upgrade linux-image-2.6.32-35-preemptUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-35-lpiaUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.32-35-powerpcUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.38-12-powerpcUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-35-ia64Upgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-35-virtualUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-35-386Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-419-doveUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-35-powerpc-smpUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-35-generic-paeUpgrade linux-image-2.6.32-219-doveUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.38-12-powerpc64-smpUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.38-12-powerpc-smpUpgrade linux-image-2.6.38-12-versatileUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-35-powerpc64-smpUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-35-sparc64Upgrade linux-image-2.6.32-35-genericUpgrade linux-image-2.6.32-35-server | Nov 8, 2024 | Aug 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub