Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel蓝牙CAPI报文远程溢出漏洞
Vulnerability Description
Linux Kernel是开放码操作系统Linux所使用的内核。 Linux Kernel对入站CAPI消息没有执行正确的处理,远程攻击者可能利用此漏洞在服务器上执行任意指令。 Linux Kernel代码的net/bluetooth/cmtp/capi.c文件中没有正确地处理入站的CAPI消息。如果用户发送了特制的CAPI报文的话,就可能触发缓冲区溢出,覆盖某些内核数据结构,导致执行任意指令。net/bluetooth/cmtp/capi.c中漏洞代码如下: case CAPI_FUNCTION_GET
CVSS Information
N/A
Vulnerability Type
N/A