CVE-2017-1000251
Description
The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.
Risk Information
Base Score
8.0
MODERATE
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
3.22
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Dtrace-modules-3.8.13-118.19.7.el6uek update (ELSA-2017-3621) dtrace-modules-3.8.13-118.19.7.el6uek-0.4.5-3.el6.x86_64.rpm | Linux |
| Dtrace-modules-3.8.13-118.19.7.el7uek update (ELSA-2017-3621) dtrace-modules-3.8.13-118.19.7.el7uek-0.4.5-3.el7.x86_64.rpm | Linux |
| Dtrace-modules-3.8.13-118.20.1.el6uek update (ELSA-2017-3657) dtrace-modules-3.8.13-118.20.1.el6uek-0.4.5-3.el6.x86_64.rpm | Linux |
| Dtrace-modules-3.8.13-118.20.1.el7uek update (ELSA-2017-3657) dtrace-modules-3.8.13-118.20.1.el7uek-0.4.5-3.el7.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234