CVE-2011-1079

The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0'…

published June 21, 2012

CVSS
—
EPSS
1%
Percentile
50.8
In the wild
Unconfirmed
What it is

The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00662 · 50.8th percentile
Published
2012-06-21T23:00Z
EPSS history
Timeline
  • 21 JUN 23:00Z
    The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0'…
    cvelistv5