V
Scaner-VS
HomeCatalogSourcesCWECAPECATT&CKMitigationsDocs
CVE-2007-1353
DEB
LowConfirmedExploit available

The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to re…

CVSS
2.1
Low
EPSS
0.00
p27
Published
2007-01-01
Updated
2007-01-01
Description

The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer.

Affected products
Linux_kernel ≤ 2.4.34.2
CVSS vector
AV:L/AC:L/Au:N/C:P/I:N/A:N
Timeline
2007-01-01
Published
2007-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: L
Local (L)
Attack Complexity
AC: L
Low (L)
Authentication
Au: N
None (N)
Confidentiality Impact
C: P
Partial
Integrity Impact
I: N
None (N)
Availability Impact
A: N
None (N)
Exploit indicators
EPSS
0.001 · p27
Known exploited (KEV)
No
Known exploits — Сканер-ВС
30080
exploitdb · https://www.exploit-db.com/exploits/30080
Enterprise
30604
exploitdb · https://www.exploit-db.com/exploits/30604
Enterprise
30605
exploitdb · https://www.exploit-db.com/exploits/30605
Enterprise
4460
exploitdb · https://www.exploit-db.com/exploits/4460
Enterprise
6851
exploitdb · https://www.exploit-db.com/exploits/6851
Enterprise
7618
exploitdb · https://www.exploit-db.com/exploits/7618
Enterprise
CVE-2006-4814
github-poc · https://github.com/tagatac/linux-CVE-2006-4814
Enterprise
Affected software
ProductVendorStatus
kernelTracked
kernelTracked
kernelTracked
kernelTracked
kernelTracked
linux-2.6Tracked
linux_kernel*Tracked