CVE

Id
50404  
CVE No.
CVE-2011-2492  
Status
Candidate  
Description
The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel memory via a crafted getsockopt system call, related to (1) the l2cap_sock_getsockopt_old function in net/bluetooth/l2cap_sock.c and (2) the rfcomm_sock_getsockopt_old function in net/bluetooth/rfcomm/sock.c.  
Phase
Assigned (20110615)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
544858 50404 CVE-2011-2492 MLIST:[linux-bluetooth] 20110508 Bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace.  View
544859 50404 CVE-2011-2492 URL:http://permalink.gmane.org/gmane.linux.bluez.kernel/12909  View
544860 50404 CVE-2011-2492 MLIST:[oss-security] 20110624 CVE request: kernel: bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace  View
544861 50404 CVE-2011-2492 URL:http://www.openwall.com/lists/oss-security/2011/06/24/2  View
544862 50404 CVE-2011-2492 MLIST:[oss-security] 20110624 Re: CVE request: kernel: bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace  View
544863 50404 CVE-2011-2492 URL:http://www.openwall.com/lists/oss-security/2011/06/24/3  View
544864 50404 CVE-2011-2492 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8d03e971cf403305217b8e62db3a2e5ad2d6263f  View
544865 50404 CVE-2011-2492 CONFIRM:http://www.kernel.org/pub/linux/kernel/v3.0/testing/ChangeLog-3.0-rc4  View
544866 50404 CVE-2011-2492 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=703019  View
544867 50404 CVE-2011-2492 HP:HPSBGN02970  View
544868 50404 CVE-2011-2492 URL:http://marc.info/?l=bugtraq&m=139447903326211&w=2  View
544869 50404 CVE-2011-2492 REDHAT:RHSA-2011:0927  View
544870 50404 CVE-2011-2492 URL:http://rhn.redhat.com/errata/RHSA-2011-0927.html  View
544871 50404 CVE-2011-2492 SECTRACK:1025778  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34478 JVNDB-2011-004720 Linux kernel の l2cap_config_req 関数における整数アンダーフローの脆弱性 Linux kernel の net/bluetooth/l2cap_core.c の l2cap_config_req 関数には、整数アンダーフローの脆弱性が存在します。 CVE-2011-2497 50404 8.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004720.html  View