CVE-2012-6545 — Sensitive Information Exposure in Linux

CWE-200 — Sensitive Information Exposure13 documents7 sources
Severity
1.9LOWNVD
EPSS
0.1%
top 71.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Linux KernelDebian LinuxRedhat Enterprise Linux
Timeline
PublishedMar 15
Latest updateMay 14

Description

The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel memory via a crafted application.

CVSS vector

AV:L/AC:M/C:P/I:N/A:NExploitability: 3.4 | Impact: 2.9

Affected Packages3 packages

▶Debianlinux/linux_kernel< 3.2.30-1+3
▶NVDlinux/linux_kernel3.5.7+159
▶debiandebian/linux< linux 3.2.30-1 (bookworm)

Also affects: Enterprise Linux 5, 6.0

Patches

Patch: www.kernel.org ↗Patch: www.kernel.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-hv2j-vg36-9f85: The Bluetooth RFCOMM implementation in the Linux kernel before 3↗2022-05-14
▶
OSV
CVE-2012-6545: The Bluetooth RFCOMM implementation in the Linux kernel before 3↗2013-03-15
▶

📋Vendor Advisories

9
Ubuntu
Linux kernel (EC2) vulnerabilities↗2013-04-25
▶
Ubuntu
Linux kernel vulnerabilities↗2013-04-19
▶
Ubuntu
Linux kernel vulnerabilities↗2012-11-30
▶
Ubuntu
Linux kernel (Oneiric backport) vulnerabilities↗2012-11-30
▶
Ubuntu
Linux kernel (OMAP4) vulnerabilities↗2012-11-30
▶

💬Community

1
Bugzilla
CVE-2012-6545 Kernel: Bluetooth: RFCOMM - information leak↗2013-03-16
▶