CVE-2011-1079

Published: Jun 21, 2012Modified: Apr 29, 2026

5.4

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:C

Exploitability: 3.4 / Impact: 7.8

Source: NVD

Description

The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command.

Affected (17)

Products: Linux: Linux Kernel

1 product

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 2.6.38.8
Linux Linux Kernel	Version 2.6.38.1
Linux Linux Kernel	Version 2.6.38.2
Linux Linux Kernel	Version 2.6.38.3
Linux Linux Kernel	Version 2.6.38.4
Linux Linux Kernel	Version 2.6.38.5
Linux Linux Kernel	Version 2.6.38.6
Linux Linux Kernel	Version 2.6.38.7
Linux Linux Kernel	Version 2.6.38
Linux Linux Kernel	Version 2.6.38 rc1
Linux Linux Kernel	Version 2.6.38 rc2
Linux Linux Kernel	Version 2.6.38 rc3
Linux Linux Kernel	Version 2.6.38 rc4
Linux Linux Kernel	Version 2.6.38 rc5
Linux Linux Kernel	Version 2.6.38 rc6
Linux Linux Kernel	Version 2.6.38 rc7
Linux Linux Kernel	Version 2.6.38 rc8

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (16)

http://downloads.avaya.com/css/P8/documents/100145416

Source: secalert@redhat.com

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=43629f8f5ea32a998d06d1bb41eefa0e821ff573

Source: secalert@redhat.com

http://packetstormsecurity.com/files/153799/Kernel-Live-Patch-Security-Notice-LSN-0053-1.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2011-0833.html

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/03/01/10

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=681260

Source: secalert@redhat.com

https://github.com/torvalds/linux/commit/43629f8f5ea32a998d06d1bb41eefa0e821ff573

Source: secalert@redhat.com

Patch

http://downloads.avaya.com/css/P8/documents/100145416

Source: af854a3a-2127-422b-91ae-364da2661108

http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=43629f8f5ea32a998d06d1bb41eefa0e821ff573

Source: af854a3a-2127-422b-91ae-364da2661108

http://packetstormsecurity.com/files/153799/Kernel-Live-Patch-Security-Notice-LSN-0053-1.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2011-0833.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2011/03/01/10

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=681260

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/43629f8f5ea32a998d06d1bb41eefa0e821ff573

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.