Linux Kernel "L2CAP" and "HCI" Information Disclosure - Linux Links

News Sections

Home
General News (3972/0)
Reviews (626/0)
Press Releases (464/0)
Distributions (187/0)
Software (807/0)
Hardware (522/0)
Security (192/0)
Tutorials (337/0)
Off Topic (180/0)

User Functions

Don't have an account yet? Sign up as a New User

Events

There are no upcoming events

Linux Kernel "L2CAP" and "HCI" Information Disclosure

Wednesday, April 25 2007 @ 01:42 PM EDT
Contributed by: sde

Two weaknesses have been reported in the Linux Kernel, which can be exploited by malicious, local users to disclose potential sensitive information.

The weaknesses are caused due to uninitialised variables within the "hci_sock_setsockopt()" function in net/bluetooth/hci_sock.c and the "l2cap_sock_setsockopt()" function in net/bluetooth/l2cap.c and can potentially be exploited to disclose uninitialised bytes of the kernel stack.
Advisory

[ Views: 1343 ]

Linux Kernel "L2CAP" and "HCI" Information Disclosure | 0 comments | Create New Account

The following comments are owned by whoever posted them. This site is not responsible for what they say.

No user comments.

What's Related

Advisory

More by sde

More from Security

Story Options

Mail Story to a Friend

Printable Story Format

We have written a range of guides highlighting excellent free books for popular programming languages. Check out the following guides: C, C++, C#, Java, JavaScript, CoffeeScript, HTML, Python, Ruby, Perl, Haskell, PHP, Lisp, R, Prolog, Scala, Scheme, and SQL.