Linux Kernel up to 5.0.14 sock.c do_hidp_sock_ioctl stack-based overflow

Summaryinfo

A vulnerability was found in Linux Kernel up to 5.0.14. It has been classified as critical. This affects the function do_hidp_sock_ioctl of the file net/bluetooth/hidp/sock.c. The manipulation leads to stack-based overflow. This vulnerability is referenced as CVE-2019-12983. The attack can only be performed from a local environment. No exploit is available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in Linux Kernel up to 5.0.14 (Operating System). It has been rated as critical. This issue affects the function do_hidp_sock_ioctl of the file net/bluetooth/hidp/sock.c. The manipulation with an unknown input leads to a stack-based overflow vulnerability. Using CWE to declare the problem leads to CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). Impacted is confidentiality, integrity, and availability. The summary by CVE is:

In the Linux kernel before 5.0.15, the function do_hidp_sock_ioctl in net/bluetooth/hidp/sock.c does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service, which is similar to CVE-2011-1079. The user would use an HIDPCONNADD command.

The weakness was published 06/26/2019. The identification of this vulnerability is CVE-2019-12983 since 06/26/2019. An attack has to be approached locally. The requirement for exploitation is a simple authentication. Technical details are known, but no exploit is available.

Upgrading to version 5.0.15 eliminates this vulnerability.

Similar entry is available at VDB-136926. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 5.0.0
• 5.0.1
• 5.0.2
• 5.0.3
• 5.0.4
• 5.0.5
• 5.0.6
• 5.0.7
• 5.0.8
• 5.0.9
• 5.0.10
• 5.0.11
• 5.0.12
• 5.0.13
• 5.0.14

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion