CVE-2023-2002
Summary
| CVE | CVE-2023-2002 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-05-26 17:15:00 UTC |
| Updated | 2024-02-02 14:15:00 UTC |
| Description | A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication. |
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] [DLA 3508-1] linux security update |
MLIST |
lists.debian.org |
|
| Debian -- Security Information -- DSA-5480-1 linux |
DEBIAN |
www.debian.org |
|
| oss-security - CVE-2023-2002: Linux Bluetooth: Unauthorized management command
execution |
MISC |
www.openwall.com |
|
| [SECURITY] [DLA 3623-1] linux-5.10 security update |
MLIST |
lists.debian.org |
|
| CVE-2023-2002 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security |
|
security.netapp.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160806 Oracle Enterprise Linux Security Update for kernel (ELSA-2023-3723)
- 160934 Oracle Enterprise Linux Security Update for kernel (ELSA-2023-5244)
- 181953 Debian Security Update for linux (CVE-2023-2002)
- 199421 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6173-1)
- 199652 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6283-1)
- 199670 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6300-1)
- 199764 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6385-1)
- 199784 Ubuntu Security Notification for Linux kernel (BlueField) Vulnerabilities (USN-6397-1)
- 200202 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6701-1)
- 200209 Ubuntu Security Notification for Linux kernel (GCP) Vulnerabilities (USN-6701-2)
- 200222 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6701-3)
- 200244 Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-6701-4)
- 241733 Red Hat Update for kernel (RHSA-2023:3723)
- 241740 Red Hat Update for kernel-rt (RHSA-2023:3708)
- 241823 Red Hat Update for kernel (RHSA-2023:4137)
- 241830 Red Hat Update for kernel-rt (RHSA-2023:4138)
- 242070 Red Hat Update for kernel security (RHSA-2023:5244)
- 242075 Red Hat Update for kernel-rt (RHSA-2023:5255)
- 378710 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0079)
- 379043 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX3-SA-2023:0136)
- 379435 Alibaba Cloud Linux Security Update for cloud-kernel (ALINUX2-SA-2024:0012)
- 6000136 Debian Security Update for linux (DLA 3508-1)
- 6000212 Debian Security Update for linux (DSA 5480-1)
- 6000265 Debian Security Update for linux-5.10 (DLA 3623-1)
- 673232 EulerOS Security Update for kernel (EulerOS-SA-2023-2357)
- 673272 EulerOS Security Update for kernel (EulerOS-SA-2023-2584)
- 754160 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:2808-1)
- 754167 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:2822-1)
- 754168 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:2830-1)
- 754170 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:2834-1)
- 754183 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:2859-1)
- 755851 SUSE Enterprise Linux Security Update for the linux kernel (SUSE-SU-2023:2646-1)
- 907040 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (27078-1)
- 941166 AlmaLinux Security Update for kernel (ALSA-2023:3723)
- 941167 AlmaLinux Security Update for kernel-rt (ALSA-2023:3708)
- 941276 AlmaLinux Security Update for kernel (ALSA-2023:5244)
- 961022 Rocky Linux Security Update for kernel (RLSA-2023:5244)