CVE-2007-1353

Bluetooth setsockopt() information leaks

Published Apr 24, 2007 CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Description
The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1356-1 New Linux 2.6.18 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1503-1 New Linux kernel 2.4.27 packages fix several issues
Debian DSA Debian DSA DSA-1503-2 New Linux kernel 2.4.27 packages fix several issues
Debian DSA Debian DSA DSA-1504-1 New Linux kernel 2.6.8 packages fix several issues
EUVD EUVD EUVD-2007-1350 The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer.
Ubuntu USN Ubuntu USN USN-470-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-486-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-489-1 Linux kernel vulnerabilities
References
Link Providers
http://rhn.redhat.com/errata/RHSA-2007-0488.html cve-icon cve-icon
http://secunia.com/advisories/24976 cve-icon cve-icon
http://secunia.com/advisories/25596 cve-icon cve-icon
http://secunia.com/advisories/25683 cve-icon cve-icon
http://secunia.com/advisories/25700 cve-icon cve-icon
http://secunia.com/advisories/25838 cve-icon cve-icon
http://secunia.com/advisories/26133 cve-icon cve-icon
http://secunia.com/advisories/26139 cve-icon cve-icon
http://secunia.com/advisories/26289 cve-icon cve-icon
http://secunia.com/advisories/26379 cve-icon cve-icon
http://secunia.com/advisories/26450 cve-icon cve-icon
http://secunia.com/advisories/26478 cve-icon cve-icon
http://secunia.com/advisories/27528 cve-icon cve-icon
http://secunia.com/advisories/29058 cve-icon cve-icon
http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm cve-icon cve-icon
http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm cve-icon cve-icon
http://www.debian.org/security/2007/dsa-1356 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1503 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1504 cve-icon cve-icon
http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.3 cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2007_35_kernel.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-0671.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-0672.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-0673.html cve-icon cve-icon
http://www.securityfocus.com/bid/23594 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-470-1 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-486-1 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-489-1 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/1495 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2007-1353 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10626 cve-icon cve-icon
https://rhn.redhat.com/errata/RHSA-2007-0376.html cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2007-1353 cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 12:50 PM
Reserved
Mar 8, 2007, 12:00 AM
Status
Modified
Published
Apr 24, 2007, 4:19 PM
Modified
Jun 16, 2026, 10:37 PM
Severity
Low
Public date
Apr 18, 2007, 12:00 AM