CVE-2017-15868

 

Published at: - 06-12-2017 12:29

Last modified: - 19-01-2023 04:46

Total changes: - 3

Description

The bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows local users to gain privileges via a crafted application.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://source.android.com/security/bulletin/pixel/2017-12-01
• https://patchwork.kernel.org/patch/9882449/
• https://github.com/torvalds/linux/commit/71bb99a02b32b4cc4265118e85f6035ca72923f0
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71bb99a02b32b4cc4265118e85f6035ca72923f0
• 102084-Third Party Advisory, VDB Entry
• SUSE-SU-2018:0011-Mailing List, Third Party Advisory
• DSA-4082-Third Party Advisory
• [debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update-Mailing List, Third Party Advisory
• USN-3583-2-Third Party Advisory
• USN-3583-1-Third Party Advisory

 

Keywords

NVD

 

CVE-2017-15868

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures