Published: 11/01/2011 Updated: 10/10/2018

CVSS v2 Base Score: 4 | Impact Score: 6.9 | Exploitability Score: 1.9

VMScore: 356

Vector: AV:L/AC:H/Au:N/C:N/I:N/A:C

The hci_uart_tty_open function in the HCI UART driver (drivers/bluetooth/hci_ldisc.c) in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service (NULL pointer dereference) via vectors related to the Bluetooth driver.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.6.36

Multiple kernel flaws have been fixed ...

A local attacker could exploit this to run programs with admininstrator privileges ...

Multiple kernel vulnerabilities ...

Multiple kernel flaws ...

An attacker could send crafted input to the kernel and cause it to crash ...

Multiple kernel flaws ...

Multiple kernel flaws have been fixed ...

Multiple security flaws in Linux kernel ...

Ubuntu Security Notice 1202-1 - Dan Rosenberg discovered that several network ioctls did not clear kernel memory correctly A local user could exploit this to read kernel stack memory, leading to a loss of privacy Brad Spengler discovered that stack memory for new a process was not correctly calculated A local attacker could exploit this to crash ...

NVD-CWE-Other http://xorl.wordpress.com/2010/12/01/cve-2010-4242-linux-kernel-bluetooth-hci-uart-invalid-pointer-access/http://git.kernel.org/linus/c19483cc5e56ac5e22dd19cf25ba210ab1537773 https://lkml.org/lkml/2010/10/7/255 https://bugzilla.redhat.com/show_bug.cgi?id=641410 http://www.redhat.com/support/errata/RHSA-2011-0004.html http://www.securityfocus.com/bid/45014 http://www.vupen.com/english/advisories/2011/0024 http://secunia.com/advisories/42789 http://secunia.com/advisories/42963 http://www.redhat.com/support/errata/RHSA-2011-0162.html http://www.vupen.com/english/advisories/2011/0168 http://www.redhat.com/support/errata/RHSA-2011-0007.html http://secunia.com/advisories/42890 http://secunia.com/advisories/43291 http://www.vupen.com/english/advisories/2011/0375 http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html http://secunia.com/advisories/46397 http://www.vmware.com/security/advisories/VMSA-2011-0012.html https://exchange.xforce.ibmcloud.com/vulnerabilities/64617 http://www.securityfocus.com/archive/1/520102/100/0/threaded https://nvd.nist.gov https://packetstormsecurity.com/files/105078/Ubuntu-Security-Notice-USN-1202-1.html https://usn.ubuntu.com/1204-1/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-4242

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect