NVD

Id
15518  
Name
CVE-2010-4242  
Description
The hci_uart_tty_open function in the HCI UART driver (drivers/bluetooth/hci_ldisc.c) in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service (NULL pointer dereference) via vectors related to the Bluetooth driver.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2011-01-10  
Modified Date
2012-03-19  
Seq
2010-4242  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
87689 15518 CVE-2010-4242 http://git.kernel.org/linus/c19483cc5e56ac5e22dd19cf25ba210ab1537773  View
87690 15518 CVE-2010-4242 SUSE-SA:2011:008  View
87691 15518 CVE-2010-4242 RHSA-2011:0004  View
87692 15518 CVE-2010-4242 RHSA-2011:0007  View
87693 15518 CVE-2010-4242 RHSA-2011:0162  View
87694 15518 CVE-2010-4242 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
87695 15518 CVE-2010-4242 45014  View
87696 15518 CVE-2010-4242 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
87697 15518 CVE-2010-4242 ADV-2011-0024  View
87698 15518 CVE-2010-4242 ADV-2011-0168  View
87699 15518 CVE-2010-4242 ADV-2011-0375  View
87700 15518 CVE-2010-4242 kernel-hciuartttyopen-dos(64617)  View
87701 15518 CVE-2010-4242 http://xorl.wordpress.com/2010/12/01/cve-2010-4242-linux-kernel-bluetooth-hci-uart-invalid-pointer-access/  View
87702 15518 CVE-2010-4242 https://bugzilla.redhat.com/show_bug.cgi?id=641410  View
87703 15518 CVE-2010-4242 [linux-kernel] 20101007 Peculiar stuff in hci_ath3k/badness in hci_uart  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36896 JVNDB-2010-002676 Linux kernel の hci_uart_tty_open 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux kernel の HCI UART ドライバ (drivers/bluetooth/hci_ldisc.c) 内にある hci_uart_tty_open 関数は、tty が書き込み操作の権限を所持しているかどうか検証しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-4242 46822 CVE-2010-4242 15518 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002676.html 2010-11-22 2012-12-25 View