Description
The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer.
Published: 2007-04-24
Score: 2.1 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-1356-1 New Linux 2.6.18 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1503-1 New Linux kernel 2.4.27 packages fix several issues
Debian DSA Debian DSA DSA-1503-2 New Linux kernel 2.4.27 packages fix several issues
Debian DSA Debian DSA DSA-1504-1 New Linux kernel 2.6.8 packages fix several issues
EUVD EUVD EUVD-2007-1350 The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copy_from_user function accessing an uninitialized stack buffer.
Ubuntu USN Ubuntu USN USN-470-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-486-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-489-1 Linux kernel vulnerabilities
References
Link Providers
http://rhn.redhat.com/errata/RHSA-2007-0488.html cve-icon cve-icon
http://secunia.com/advisories/24976 cve-icon cve-icon
http://secunia.com/advisories/25596 cve-icon cve-icon
http://secunia.com/advisories/25683 cve-icon cve-icon
http://secunia.com/advisories/25700 cve-icon cve-icon
http://secunia.com/advisories/25838 cve-icon cve-icon
http://secunia.com/advisories/26133 cve-icon cve-icon
http://secunia.com/advisories/26139 cve-icon cve-icon
http://secunia.com/advisories/26289 cve-icon cve-icon
http://secunia.com/advisories/26379 cve-icon cve-icon
http://secunia.com/advisories/26450 cve-icon cve-icon
http://secunia.com/advisories/26478 cve-icon cve-icon
http://secunia.com/advisories/27528 cve-icon cve-icon
http://secunia.com/advisories/29058 cve-icon cve-icon
http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm cve-icon cve-icon
http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm cve-icon cve-icon
http://www.debian.org/security/2007/dsa-1356 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1503 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1504 cve-icon cve-icon
http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.34.3 cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2007_35_kernel.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-0671.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-0672.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-0673.html cve-icon cve-icon
http://www.securityfocus.com/bid/23594 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-470-1 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-486-1 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-489-1 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/1495 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2007-1353 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10626 cve-icon cve-icon
https://rhn.redhat.com/errata/RHSA-2007-0376.html cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2007-1353 cve-icon
History

No history.

Subscriptions

Linux Linux Kernel
Redhat Enterprise Linux
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-07T12:50:35.205Z

Reserved: 2007-03-08T00:00:00.000Z

Link: CVE-2007-1353

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2007-04-24T16:19:00.000

Modified: 2026-04-23T00:35:47.467

Link: CVE-2007-1353

cve-icon Redhat

Severity : Low

Publid Date: 2007-04-18T00:00:00Z

Links: CVE-2007-1353 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses