CVE-2015-8575

The sco_sock_bind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not verify an address length, which allows local users to obtain…

published February 8, 2016

CVSS
—
EPSS
1%
Percentile
43.2
In the wild
Unconfirmed
What it is

The sco_sock_bind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not verify an address length, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00518 · 43.2th percentile
Published
2016-02-08T02:00Z
EPSS history
Timeline
  • 08 FEB 02:00Z
    The sco_sock_bind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not verify an address length, which allows local users to obtain…
    cvelistv5