NetSight
IP …
low1.9

CVE-2011-1078

The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a certain structure, which allows local users…

Impact

The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via the SCO_CONNINFO option.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.38.8
Versions 2.6.38, 2.6.38.1, 2.6.38.2, 2.6.38.3, 2.6.38.4

Weakness classification

CWE-200

References