The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel prior to 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
linux linux kernel 2.6.38 |
||
linux linux kernel 2.6.38.3 |
||
linux linux kernel |
||
linux linux kernel 2.6.38.6 |
||
linux linux kernel 2.6.38.1 |
||
linux linux kernel 2.6.38.5 |
||
linux linux kernel 2.6.38.2 |
||
linux linux kernel 2.6.38.4 |
||
linux linux kernel 2.6.38.7 |