Vulnerability CVE-2011-1079: Information

Description

The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command.

Severity: MEDIUM (5.4)

URL: https://nvd.nist.gov/vuln/detail/CVE-2011-1079
Published: June 22, 2012
Modified: Feb. 13, 2023
Error type identifier: CWE-20

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
kernel-image-std-debugsisyphus4.19.42-alt16.1.91-alt1ALT-PU-2019-1791-1229194Fixed
kernel-image-std-debugc9f24.19.42-alt14.19.102-alt1ALT-PU-2019-1791-1229194Fixed
kernel-image-std-defsisyphus4.19.42-alt16.1.91-alt1ALT-PU-2019-1794-1229195Fixed
kernel-image-std-defp104.19.42-alt15.10.216-alt1ALT-PU-2019-1794-1229195Fixed
kernel-image-std-defp94.19.42-alt15.4.275-alt1ALT-PU-2019-1794-1229195Fixed
kernel-image-std-defp84.9.175-alt0.M80P.14.9.337-alt0.M80P.1ALT-PU-2019-1826-1229201Fixed
kernel-image-std-defc9f24.19.42-alt15.10.214-alt0.c9f.2ALT-PU-2019-1794-1229195Fixed
kernel-image-std-defc74.4.183-alt0.M70C.14.4.277-alt0.M70C.1ALT-PU-2019-2175-1233233Fixed
kernel-image-std-paec9f24.19.42-alt14.19.72-alt1ALT-PU-2019-1792-1229196Fixed
kernel-image-un-defsisyphus5.0.15-alt16.6.31-alt1ALT-PU-2019-1793-1229197Fixed
kernel-image-un-defp105.0.15-alt16.1.85-alt1ALT-PU-2019-1793-1229197Fixed
kernel-image-un-defp95.0.15-alt15.10.216-alt2ALT-PU-2019-1793-1229197Fixed
kernel-image-un-defc10f15.0.15-alt16.1.85-alt0.c10f.1ALT-PU-2019-1793-1229197Fixed
kernel-image-un-defc9f25.0.15-alt15.10.29-alt2ALT-PU-2019-1793-1229197Fixed
kernel-image-un-defc74.9.277-alt0.M70C.14.9.277-alt0.M70C.1ALT-PU-2021-3032-1281292Fixed
usbipsisyphus5.10-alt15.10-alt1ALT-PU-2023-1798-1320453Fixed
usbipsisyphus_e2k5.10-alt15.10-alt1ALT-PU-2023-7452-1-Fixed
usbipp105.10-alt15.10-alt1ALT-PU-2023-1903-1320461Fixed
usbipp10_e2k5.10-alt15.10-alt1ALT-PU-2023-7498-1-Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://github.com/torvalds/linux/commit/43629f8f5ea32a998d06d1bb41eefa0e821ff573
  • Patch
[oss-security] 20110301 Re: CVE request: kernel: two bluetooth and one ebtables infoleaks/DoSes
    https://bugzilla.redhat.com/show_bug.cgi?id=681260
      http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39
        RHSA-2011:0833
          http://downloads.avaya.com/css/P8/documents/100145416
            http://packetstormsecurity.com/files/153799/Kernel-Live-Patch-Security-Notice-LSN-0053-1.html
              http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=43629f8f5ea32a998d06d1bb41eefa0e821ff573

                  1. Configuration 1

                    cpe:2.3:o:linux:linux_kernel:2.6.38:rc7:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:2.6.38:rc6:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:2.6.38:rc4:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:2.6.38.3:*:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
                    End including
                    2.6.38.8
                    cpe:2.3:o:linux:linux_kernel:2.6.38:rc3:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:2.6.38:rc5:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:2.6.38:rc2:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:2.6.38.6:*:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:2.6.38.1:*:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:2.6.38:rc1:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:2.6.38.5:*:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:2.6.38.2:*:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:2.6.38:*:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:2.6.38:rc8:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:2.6.38.4:*:*:*:*:*:*:*
                    cpe:2.3:o:linux:linux_kernel:2.6.38.7:*:*:*:*:*:*:*
                VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
                Version: v24.5.1
                Back to top