Vulnetix
Try Vulnetix Request Demo
CVE-2011-2497 REJECTED

Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.

EPSS 2.79% · 86.0th percentile

Risk Scores

EPSS Score
2.79%
86.0th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlinux0
Ubuntu:14.04:LTSlinux-flo0
Ubuntu:14.04:LTSlinux-manta0
Ubuntu:14.04:LTSlinux-mako0
Ubuntu:14.04:LTSlinux-goldfish0
Ubuntu:14.04:LTSlinux-maguro0
Ubuntu:14.04:LTSlinux-grouper0, 3.1.10-6.25, 3.1.10-7.27

Timeline

References

Open in Interactive Console →