Vulnerability-Lookup

BDU:2017-02053 (CVE-2017-1000251)

Vulnerability from fstec – Published: 2017-09-15 – Updated: 2024-12-03 – View on bdu.fstec.ru Exploit exists Fixed

Title

Уязвимость компонента модуля L2CAP пакета программ, реализующих стек протоколов Bluetooth, позволяющая нарушителю выполнить произвольный код

Summary

Уязвимость компонента модуля L2CAP пакета программ BlueZ, реализующих стек протоколов Bluetooth, связана с переполнением буфера. Эксплуатация уязвимости позволяет нарушителю, действующему удалённо, контролировать размер буфера и выполнять произвольный код

Severity

7.7 (High) CVSS 2.0


                      
                        AV:A/AC:L/Au:S/C:C/I:C/A:C

8.0 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-120 - Копирование буфера без проверки размера входных данных (классическое переполнение буфера)
CWE-787 - Запись за границами буфера

Aliases

CVE-2017-1000251, CERT, VU:, 240311, RHSA-2017:2679, RHSA-2017:2680, RHSA-2017:2681, RHSA-2017:2682, RHSA-2017:2683, RHSA-2017:2704, RHSA-2017:2705, RHSA-2017:2706, RHSA-2017:2707

References

53 references

URL
http://nvidia.custhelp.com/app/answers/detail/a_id/4561
http://www.debian.org/security/2017/dsa-3981
http://www.securityfocus.com/bid/100809
http://www.securitytracker.com/id/1039373
http://www.ubuntu.com/usn/usn-3419-1
http://www.ubuntu.com/usn/usn-3419-2
http://www.ubuntu.com/usn/usn-3420-1
http://www.ubuntu.com/usn/usn-3420-2
http://www.ubuntu.com/usn/usn-3422-1
http://www.ubuntu.com/usn/usn-3422-2
http://www.ubuntu.com/usn/usn-3423-1
https://access.redhat.com/errata/RHSA-2017:2679
https://access.redhat.com/errata/RHSA-2017:2680
https://access.redhat.com/errata/RHSA-2017:2681
https://access.redhat.com/errata/RHSA-2017:2682
https://access.redhat.com/errata/RHSA-2017:2683
https://access.redhat.com/errata/RHSA-2017:2704
https://access.redhat.com/errata/RHSA-2017:2705
https://access.redhat.com/errata/RHSA-2017:2706
https://access.redhat.com/errata/RHSA-2017:2707
https://access.redhat.com/errata/RHSA-2017:2731
https://access.redhat.com/errata/RHSA-2017:2732
https://access.redhat.com/security/vulnerabilities/blueborne
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000251
https://github.com/torvalds/linux/commit/f2fcfcd670257236ebf2088bbdf26f6a8ef459fe
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.45
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.13
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.2
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.88
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.50
https://nvd.nist.gov/vuln/detail/CVE-2017-1000251
https://security-tracker.debian.org/tracker/CVE-2017-1000251
https://ubuntu.com/security/notices/USN-3419-1
https://ubuntu.com/security/notices/USN-3419-2
https://ubuntu.com/security/notices/USN-3420-1
https://ubuntu.com/security/notices/USN-3420-2
https://ubuntu.com/security/notices/USN-3422-1
https://ubuntu.com/security/notices/USN-3422-2
https://ubuntu.com/security/notices/USN-3423-1
https://usn.ubuntu.com/usn/usn-3419-1
https://usn.ubuntu.com/usn/usn-3419-2
https://usn.ubuntu.com/usn/usn-3420-1
https://usn.ubuntu.com/usn/usn-3420-2
https://usn.ubuntu.com/usn/usn-3422-1
https://usn.ubuntu.com/usn/usn-3422-2
https://usn.ubuntu.com/usn/usn-3423-1
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/BlueBorne
https://www.armis.com/blueborne
https://www.armis.com/blueborne/
https://www.cve.org/CVERecord?id=CVE-2017-1000251
https://www.exploit-db.com/exploits/42762/
https://www.kb.cert.org/vuls/id/240311
https://www.synology.com/support/security/Synology_SA_17_52_BlueBorne

Impacted products

4 products from 2 vendors

Vendors

Сообщество свободного программного обеспечения, ООО «РусБИТех-Астра»

Products

BlueZ, Debian GNU/Linux, Astra Linux Common Edition (запись в едином реестре российских программ №4433), Linux

Versions

до 5.46 включительно (BlueZ), 9 (Debian GNU/Linux), 2.12 «Орёл» (Astra Linux Common Edition), 8 (Debian GNU/Linux), от 4.2 до 4.4.87 включительно (Linux), от 4.5 до 4.9.49 включительно (Linux), от 4.10 до 4.12.12 включительно (Linux), от 2.6.32 до 4.1.44 включительно (Linux), от 4.13 до 4.13.1 включительно (Linux)

Product types

Application software, Operating system

Platforms

Сообщество свободного программного обеспечения Linux от 3.3 rc1 до 4.13.1 включительно, Сообщество свободного программного обеспечения Debian GNU/Linux 9, ООО «РусБИТех-Астра» Astra Linux Common Edition 2.12 «Орёл» (запись в едином реестре российских программ №4433), Сообщество свободного программного обеспечения Debian GNU/Linux 8

Mitigations

Использование рекомендаций: Для Linux: https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.45 https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.13 https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.2 https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.88 https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.50 Для Astra Linux: Обновление программного обеспечения (пакета linux) до 4.9.30-2+deb9u5 или более поздней версии Для Debian: Обновление программного обеспечения (пакета linux) до 4.9.30-2+deb9u5 или более поздней версии

JSON

To clipboard

{
  "CVSS 2.0": "AV:A/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5.46 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (BlueZ), 9 (Debian GNU/Linux), 2.12 \u00ab\u041e\u0440\u0451\u043b\u00bb (Astra Linux Common Edition), 8 (Debian GNU/Linux), \u043e\u0442 4.2 \u0434\u043e 4.4.87 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.5 \u0434\u043e 4.9.49 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.10 \u0434\u043e 4.12.12 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 2.6.32 \u0434\u043e 4.1.44 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.13 \u0434\u043e 4.13.1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Linux:\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.45\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.13\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.2\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.88\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.50\n\n\u0414\u043b\u044f Astra Linux:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u043f\u0430\u043a\u0435\u0442\u0430 linux) \u0434\u043e 4.9.30-2+deb9u5 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f Debian:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u043f\u0430\u043a\u0435\u0442\u0430 linux) \u0434\u043e 4.9.30-2+deb9u5 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "09.09.2017",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "03.12.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "15.09.2017",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2017-02053",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2017-1000251, CERT VU: 240311, RHSA-2017:2679, RHSA-2017:2680, RHSA-2017:2681, RHSA-2017:2682, RHSA-2017:2683, RHSA-2017:2704, RHSA-2017:2705, RHSA-2017:2706, RHSA-2017:2707",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "BlueZ, Debian GNU/Linux, Astra Linux Common Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164433), Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 3.3 rc1 \u0434\u043e 4.13.1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 9 , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Common Edition 2.12 \u00ab\u041e\u0440\u0451\u043b\u00bb  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164433), \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 8 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 \u043c\u043e\u0434\u0443\u043b\u044f L2CAP \u043f\u0430\u043a\u0435\u0442\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0435\u043a \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 Bluetooth, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430) (CWE-120), \u0417\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 (CWE-787)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 \u043c\u043e\u0434\u0443\u043b\u044f L2CAP \u043f\u0430\u043a\u0435\u0442\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c BlueZ, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0435\u043a \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 Bluetooth, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0437\u043c\u0435\u0440 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561\nhttp://www.debian.org/security/2017/dsa-3981\nhttp://www.securityfocus.com/bid/100809\nhttp://www.securitytracker.com/id/1039373\nhttp://www.ubuntu.com/usn/usn-3419-1\nhttp://www.ubuntu.com/usn/usn-3419-2\nhttp://www.ubuntu.com/usn/usn-3420-1\nhttp://www.ubuntu.com/usn/usn-3420-2\nhttp://www.ubuntu.com/usn/usn-3422-1\nhttp://www.ubuntu.com/usn/usn-3422-2\nhttp://www.ubuntu.com/usn/usn-3423-1\nhttps://access.redhat.com/errata/RHSA-2017:2679\nhttps://access.redhat.com/errata/RHSA-2017:2680\nhttps://access.redhat.com/errata/RHSA-2017:2681\nhttps://access.redhat.com/errata/RHSA-2017:2682\nhttps://access.redhat.com/errata/RHSA-2017:2683\nhttps://access.redhat.com/errata/RHSA-2017:2704\nhttps://access.redhat.com/errata/RHSA-2017:2705\nhttps://access.redhat.com/errata/RHSA-2017:2706\nhttps://access.redhat.com/errata/RHSA-2017:2707\nhttps://access.redhat.com/errata/RHSA-2017:2731\nhttps://access.redhat.com/errata/RHSA-2017:2732\nhttps://access.redhat.com/security/vulnerabilities/blueborne\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000251\nhttps://github.com/torvalds/linux/commit/f2fcfcd670257236ebf2088bbdf26f6a8ef459fe\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.45\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.13\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.2\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.88\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.50\nhttps://nvd.nist.gov/vuln/detail/CVE-2017-1000251\nhttps://security-tracker.debian.org/tracker/CVE-2017-1000251\nhttps://ubuntu.com/security/notices/USN-3419-1\nhttps://ubuntu.com/security/notices/USN-3419-2\nhttps://ubuntu.com/security/notices/USN-3420-1\nhttps://ubuntu.com/security/notices/USN-3420-2\nhttps://ubuntu.com/security/notices/USN-3422-1\nhttps://ubuntu.com/security/notices/USN-3422-2\nhttps://ubuntu.com/security/notices/USN-3423-1\nhttps://usn.ubuntu.com/usn/usn-3419-1\nhttps://usn.ubuntu.com/usn/usn-3419-2\nhttps://usn.ubuntu.com/usn/usn-3420-1\nhttps://usn.ubuntu.com/usn/usn-3420-2\nhttps://usn.ubuntu.com/usn/usn-3422-1\nhttps://usn.ubuntu.com/usn/usn-3422-2\nhttps://usn.ubuntu.com/usn/usn-3423-1\nhttps://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/BlueBorne\nhttps://www.armis.com/blueborne\nhttps://www.armis.com/blueborne/\nhttps://www.cve.org/CVERecord?id=CVE-2017-1000251\nhttps://www.exploit-db.com/exploits/42762/\nhttps://www.kb.cert.org/vuls/id/240311\nhttps://www.synology.com/support/security/Synology_SA_17_52_BlueBorne",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-120, CWE-787",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,7)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8)\n\u041d\u0435\u0442 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 0)"
}

CVE-2017-1000251 (GCVE-0-2017-1000251)

Vulnerability from cvelistv5 – Published: 2017-09-12 17:00 – Updated: 2024-08-05 22:00

Summary

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
https://access.redhat.com/errata/RHSA-2017:2732	vendor-advisoryx_refsource_REDHAT
https://www.exploit-db.com/exploits/42762/	exploitx_refsource_EXPLOIT-DB
https://access.redhat.com/errata/RHSA-2017:2705	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:2683	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:2704	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:2682	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/vulnerabilitie…	x_refsource_CONFIRM
https://www.armis.com/blueborne	x_refsource_MISC
http://www.securitytracker.com/id/1039373	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2017:2731	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2017/dsa-3981	vendor-advisoryx_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2017:2706	vendor-advisoryx_refsource_REDHAT
https://www.synology.com/support/security/Synolog…	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/f2fcfcd6…	x_refsource_MISC
http://nvidia.custhelp.com/app/answers/detail/a_id/4561	x_refsource_CONFIRM
http://www.securityfocus.com/bid/100809	vdb-entryx_refsource_BID
https://www.kb.cert.org/vuls/id/240311	third-party-advisoryx_refsource_CERT-VN
https://access.redhat.com/errata/RHSA-2017:2681	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:2679	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:2680	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:2707	vendor-advisoryx_refsource_REDHAT

Date Public

2017-09-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:00:39.937Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:2732",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2732"
          },
          {
            "name": "42762",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/42762/"
          },
          {
            "name": "RHSA-2017:2705",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2705"
          },
          {
            "name": "RHSA-2017:2683",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2683"
          },
          {
            "name": "RHSA-2017:2704",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2704"
          },
          {
            "name": "RHSA-2017:2682",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2682"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/vulnerabilities/blueborne"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.armis.com/blueborne"
          },
          {
            "name": "1039373",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039373"
          },
          {
            "name": "RHSA-2017:2731",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2731"
          },
          {
            "name": "DSA-3981",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3981"
          },
          {
            "name": "RHSA-2017:2706",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2706"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.synology.com/support/security/Synology_SA_17_52_BlueBorne"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/f2fcfcd670257236ebf2088bbdf26f6a8ef459fe"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
          },
          {
            "name": "100809",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100809"
          },
          {
            "name": "VU#240311",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/240311"
          },
          {
            "name": "RHSA-2017:2681",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2681"
          },
          {
            "name": "RHSA-2017:2679",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2679"
          },
          {
            "name": "RHSA-2017:2680",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2680"
          },
          {
            "name": "RHSA-2017:2707",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2707"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "dateAssigned": "2017-09-08T00:00:00.000Z",
      "datePublic": "2017-09-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-16T10:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2017:2732",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2732"
        },
        {
          "name": "42762",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/42762/"
        },
        {
          "name": "RHSA-2017:2705",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2705"
        },
        {
          "name": "RHSA-2017:2683",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2683"
        },
        {
          "name": "RHSA-2017:2704",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2704"
        },
        {
          "name": "RHSA-2017:2682",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2682"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://access.redhat.com/security/vulnerabilities/blueborne"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.armis.com/blueborne"
        },
        {
          "name": "1039373",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039373"
        },
        {
          "name": "RHSA-2017:2731",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2731"
        },
        {
          "name": "DSA-3981",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3981"
        },
        {
          "name": "RHSA-2017:2706",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2706"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.synology.com/support/security/Synology_SA_17_52_BlueBorne"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/f2fcfcd670257236ebf2088bbdf26f6a8ef459fe"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
        },
        {
          "name": "100809",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100809"
        },
        {
          "name": "VU#240311",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/240311"
        },
        {
          "name": "RHSA-2017:2681",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2681"
        },
        {
          "name": "RHSA-2017:2679",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2679"
        },
        {
          "name": "RHSA-2017:2680",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2680"
        },
        {
          "name": "RHSA-2017:2707",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2707"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "DATE_ASSIGNED": "2017-09-08",
          "ID": "CVE-2017-1000251",
          "REQUESTER": "security@armis.com",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:2732",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2732"
            },
            {
              "name": "42762",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/42762/"
            },
            {
              "name": "RHSA-2017:2705",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2705"
            },
            {
              "name": "RHSA-2017:2683",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2683"
            },
            {
              "name": "RHSA-2017:2704",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2704"
            },
            {
              "name": "RHSA-2017:2682",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2682"
            },
            {
              "name": "https://access.redhat.com/security/vulnerabilities/blueborne",
              "refsource": "CONFIRM",
              "url": "https://access.redhat.com/security/vulnerabilities/blueborne"
            },
            {
              "name": "https://www.armis.com/blueborne",
              "refsource": "MISC",
              "url": "https://www.armis.com/blueborne"
            },
            {
              "name": "1039373",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039373"
            },
            {
              "name": "RHSA-2017:2731",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2731"
            },
            {
              "name": "DSA-3981",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3981"
            },
            {
              "name": "RHSA-2017:2706",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2706"
            },
            {
              "name": "https://www.synology.com/support/security/Synology_SA_17_52_BlueBorne",
              "refsource": "CONFIRM",
              "url": "https://www.synology.com/support/security/Synology_SA_17_52_BlueBorne"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/f2fcfcd670257236ebf2088bbdf26f6a8ef459fe",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/f2fcfcd670257236ebf2088bbdf26f6a8ef459fe"
            },
            {
              "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561",
              "refsource": "CONFIRM",
              "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4561"
            },
            {
              "name": "100809",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100809"
            },
            {
              "name": "VU#240311",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/240311"
            },
            {
              "name": "RHSA-2017:2681",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2681"
            },
            {
              "name": "RHSA-2017:2679",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2679"
            },
            {
              "name": "RHSA-2017:2680",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2680"
            },
            {
              "name": "RHSA-2017:2707",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2707"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-1000251",
    "datePublished": "2017-09-12T17:00:00.000Z",
    "dateReserved": "2017-09-12T00:00:00.000Z",
    "dateUpdated": "2024-08-05T22:00:39.937Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

RHSA-2017:2679

Vulnerability from csaf_redhat - Published: 2017-09-12 17:08 - Updated: 2026-06-28 12:11

Summary

Red Hat Security Advisory: kernel security update

Severity

Important

Scope

1 vulnerability in this advisory.

Open the full advisory

RHSA-2017:2680

Vulnerability from csaf_redhat - Published: 2017-09-12 17:15 - Updated: 2026-06-28 12:11

Summary

Red Hat Security Advisory: kernel security update

Severity

Important

Scope

1 vulnerability in this advisory.

Open the full advisory

RHSA-2017:2681

Vulnerability from csaf_redhat - Published: 2017-09-12 17:46 - Updated: 2026-06-28 12:06

Summary

Red Hat Security Advisory: kernel security update

Severity

Important

Scope

1 vulnerability in this advisory.

Open the full advisory

RHSA-2017:2682

Vulnerability from csaf_redhat - Published: 2017-09-12 17:19 - Updated: 2026-06-28 12:08

Summary

Red Hat Security Advisory: kernel security update

Severity

Important

Scope

1 vulnerability in this advisory.

Open the full advisory

RHSA-2017:2683

Vulnerability from csaf_redhat - Published: 2017-09-12 15:53 - Updated: 2026-06-28 12:11

Summary

Red Hat Security Advisory: kernel security update

Severity

Important

Scope

1 vulnerability in this advisory.

Open the full advisory

RHSA-2017:2704

Vulnerability from csaf_redhat - Published: 2017-09-13 13:42 - Updated: 2026-06-28 12:08

Summary

Red Hat Security Advisory: kernel-rt security update

Severity

Important

Scope

1 vulnerability in this advisory.

Open the full advisory

RHSA-2017:2705

Vulnerability from csaf_redhat - Published: 2017-09-13 13:44 - Updated: 2026-06-28 12:30

Summary

Red Hat Security Advisory: kernel-rt security update

Severity

Important

Scope

1 vulnerability in this advisory.

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2017-02053 (CVE-2017-1000251)

CVE-2017-1000251 (GCVE-0-2017-1000251)

RHSA-2017:2679

RHSA-2017:2680

RHSA-2017:2681

RHSA-2017:2682

RHSA-2017:2683

RHSA-2017:2704

RHSA-2017:2705

Tags

Sightings

Nomenclature

Related by attack behaviour