NetSight
IP …
high8.0Public exploit code

CVE-2017-1000251

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack o…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.32 before 3.2.94
from 3.3 before 3.16.49
from 3.17 before 3.18.71
from 3.19 before 4.1.45
from 4.2 before 4.4.88
from 4.5 before 4.9.50
DebianDebian Linux
Versions 8.0, 9.0
NvidiaJetson Tk1
Versions r21, r24
NvidiaJetson Tx1
Versions r21, r24
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 6.2, 6.4, 6.6, 7.2, 7.3, 7.4
RedhatEnterprise Linux Server Eus
Versions 6.7, 7.2, 7.3, 7.4, 7.5, 7.6
RedhatEnterprise Linux Server Tus
Versions 6.5, 6.6, 7.2, 7.3, 7.4, 7.6
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0

Weakness classification

CWE-787

References