Linux Kernel Bluetooth Subsystem CVE-2017-1000251 Stack Based Buffer Overflow Vulnerability
BID:100809
CVE-2017-1000251 |Info
Linux Kernel Bluetooth Subsystem CVE-2017-1000251 Stack Based Buffer Overflow Vulnerability
| Bugtraq ID: | 100809 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2017-1000251 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 12 2017 12:00AM |
| Updated: | Sep 25 2017 10:00AM |
| Credit: | Armis Labs |
| Vulnerable: |
Redhat MRG Realtime for RHEL 6 Server 2 Redhat Enterprise Mrg 2 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux Client Optional 7 Redhat Enterprise Linux 7 Client Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 Linux Kernerl 4.10.10 Linux kernel 4.12.3 Linux kernel 4.12.2 Linux kernel 4.11.5 Linux kernel 4.11.4 Linux kernel 4.11.2 Linux kernel 4.11.1 Linux kernel 4.10.15 Linux kernel 4.10.12 Linux kernel 4.10.10 Linux kernel 4.10.6 Linux kernel 4.10 Linux kernel 4.9.8 Linux kernel 4.9.4 Linux kernel 4.9.3 Linux kernel 4.4.30 Linux kernel 4.4.28 Linux kernel 4.4.27 Linux kernel 4.4.25 Linux kernel 4.4.24 Linux kernel 4.4.23 Linux kernel 4.4.7 Linux kernel 4.4.2 Linux kernel 4.2.3 Linux kernel 4.1.4 Linux kernel 4.1.1 Linux kernel 4.0.6 Linux kernel 3.13.9 Linux kernel 3.8.9 Linux kernel 3.8.6 Linux kernel 3.8.5 Linux kernel 3.8.4 Linux kernel 3.8.2 Linux kernel 3.8.1 Linux kernel 3.7.10 Linux kernel 3.7.9 Linux kernel 3.7.8 Linux kernel 3.7.7 Linux kernel 3.7.5 Linux kernel 3.7.4 Linux kernel 3.7.3 Linux kernel 3.7.2 Linux kernel 3.7.1 Linux kernel 3.6.11 Linux kernel 3.6.10 Linux kernel 3.6.9 Linux kernel 3.6.8 Linux kernel 3.6.7 Linux kernel 3.6.6 Linux kernel 3.6.5 Linux kernel 3.6.4 Linux kernel 3.6.3 Linux kernel 3.6.2 Linux kernel 3.6.1 Linux kernel 3.5.7 Linux kernel 3.5.6 Linux kernel 3.5.5 Linux kernel 3.5.4 Linux kernel 3.5.3 Linux kernel 3.5.2 Linux kernel 3.5.1 Linux kernel 3.4.88 Linux kernel 3.4.87 Linux kernel 3.4.86 Linux kernel 3.4.80 Linux kernel 3.4.76 Linux kernel 3.4.73 Linux kernel 3.4.71 Linux kernel 3.4.64 Linux kernel 3.4.58 Linux kernel 3.4.42 Linux kernel 3.4.36 Linux kernel 3.4.32 Linux kernel 3.4.31 Linux kernel 3.4.27 Linux kernel 3.4.26 Linux kernel 3.4.25 Linux kernel 3.4.21 Linux kernel 3.4.20 Linux kernel 3.4.19 Linux kernel 3.4.18 Linux kernel 3.4.17 Linux kernel 3.4.16 Linux kernel 3.4.15 Linux kernel 3.4.14 Linux kernel 3.4.13 Linux kernel 3.4.12 Linux kernel 3.4.11 Linux kernel 3.4.10 Linux kernel 3.4.9 Linux kernel 3.4.8 Linux kernel 3.4.7 Linux kernel 3.4.6 Linux kernel 3.4.5 Linux kernel 3.4.4 Linux kernel 3.4.3 Linux kernel 3.4.2 Linux kernel 3.4.1 Linux kernel 3.3.4 Linux kernel 2.4 Linux kernel 4.9.9 Linux kernel 4.9.11 Linux kernel 4.9-rc4 Linux kernel 4.9-rc3 Linux kernel 4.9-rc1 Linux kernel 4.9 Linux kernel 4.8.7 Linux kernel 4.8.13 Linux kernel 4.8.12 Linux kernel 4.8 Linux kernel 4.7-rc6 Linux kernel 4.7-rc5 Linux kernel 4.7-rc1 Linux kernel 4.6.3 Linux kernel 4.6.2 Linux kernel 4.6.1 Linux kernel 4.6 rc7 Linux kernel 4.5.5 Linux kernel 4.5-rc7 Linux kernel 4.5-rc4 Linux kernel 4.5-rc2 Linux kernel 4.5 Linux kernel 4.4.38 Linux kernel 4.4.26 Linux kernel 4.4.14 Linux kernel 4.4.1 Linux kernel 4.4-rc4 Linux kernel 4.4-rc1 Linux kernel 4.4 Linux kernel 4.3.3 Linux kernel 4.3-rc1 Linux kernel 4.13.1 Linux kernel 4.13-rc1 Linux kernel 4.13 Linux kernel 4.12.10 Linux kernel 4.12.1 Linux kernel 4.12-rc1 Linux kernel 4.12 Linux kernel 4.11.8 Linux kernel 4.11.7 Linux kernel 4.11-rc8 Linux kernel 4.11-rc6 Linux kernel 4.11-rc5 Linux kernel 4.11-rc3 Linux kernel 4.11-rc2 Linux kernel 4.11-rc1 Linux kernel 4.10.9 Linux kernel 4.10.8 Linux kernel 4.10.7 Linux kernel 4.10.5 Linux kernel 4.10.3 Linux kernel 4.10.2 Linux kernel 4.10.11 Linux kernel 4.10-rc8 Linux kernel 4.10-rc1 Linux kernel 4.1.15 Linux kernel 4.1-rc7 Linux kernel 4.1-rc6 Linux kernel 4.1-rc3 Linux kernel 4.1-rc1 Linux kernel 4.0.5 Linux kernel 4.0 Linux kernel 3.9.8 Linux kernel 3.9.4 Linux kernel 3.9-rc8 Linux kernel 3.9-rc7 Linux kernel 3.9-rc3 Linux kernel 3.9-rc1 Linux kernel 3.9 Linux kernel 3.8 Linux kernel 3.7.6 Linux kernel 3.7 Linux kernel 3.6 Linux kernel 3.5-rc1 Linux kernel 3.5 Linux kernel 3.4.93 Linux kernel 3.4.81 Linux kernel 3.4.70 Linux kernel 3.4.67 Linux kernel 3.4.29 Linux kernel 3.4 Linux kernel 3.3-rc1 Linux kernel 3.14.73 Linux kernel 3.13.7 Linux kernel 3.13.6 Linux kernel 3.13.4 Linux Kernal 4.1-rc7 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
Linux kernel 4.13.2 |
Discussion
Linux Kernel Bluetooth Subsystem CVE-2017-1000251 Stack Based Buffer Overflow Vulnerability
Linux Kernel is prone to a stack-based buffer-overflow vulnerability
An attacker can leverage this issue to execute arbitrary code with root privileges. Failed exploit attempts will likely result in denial-of-service conditions.
Linux Kernel 3.3-rc1 through 4.13.1 are vulnerable.
Linux Kernel is prone to a stack-based buffer-overflow vulnerability
An attacker can leverage this issue to execute arbitrary code with root privileges. Failed exploit attempts will likely result in denial-of-service conditions.
Linux Kernel 3.3-rc1 through 4.13.1 are vulnerable.
Exploit / POC
Linux Kernel Bluetooth Subsystem CVE-2017-1000251 Stack Based Buffer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linux Kernel Bluetooth Subsystem CVE-2017-1000251 Stack Based Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Linux Kernel Bluetooth Subsystem CVE-2017-1000251 Stack Based Buffer Overflow Vulnerability
References:
References:
- Bluetooth: Properly check L2CAP config option output buffer length (Linux)
- Linux ChangeLog-4.13.2 (Linux)
- Linux Homepage (Linux)
- The IoT Attack Vector �??BlueBorne�?� Exposes Almost Every Connected Device (Armis)
- Blueborne - Linux Kernel Remote DoS in Bluetooth subsystem CVE-2017-1000251 (Redhat)
- Bug 1489716 CVE-2017-1000251 kernel: stack BO in the native Bluetooth stack (Redhat)
- CVE-2017-1000251 (Redhat)
- VU#240311 Multiple Bluetooth implementation vulnerabilities affect many devices (CERT)