Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2017-1000251
Severity
8.0HIGH
EPSS
3.0%
top 13.34%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedSep 12
Latest updateMay 13
Description
The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.1 | Impact: 5.9
Affected Packages15 packages
Also affects: Debian Linux 8.0, 9.0, Enterprise Linux 6.2, 6.4, 6.6, 7.2, 7.3, 7.4, 7.6, 7.7, 6.7, 7.5, 6.5
Patches
🔴Vulnerability Details
7GHSA▶
GHSA-qhfx-x9j9-g24p: The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2↗2022-05-13
OSV
▶