hshivhare67 / Kernel_v3.0.35

Other
0 stars 0 forks source link

CVE-2012-6544 (Low) detected in linux-stable-rtv3.8.6, linux-stable-rtv3.8.6 #892

Open mend-bolt-for-github[bot] opened 1 year ago

mend-bolt-for-github[bot] commented 1 year ago

CVE-2012-6544 - Low Severity Vulnerability

Vulnerable Libraries - linux-stable-rtv3.8.6, linux-stable-rtv3.8.6

Vulnerability Details

The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the (1) L2CAP or (2) HCI implementation.

Publish Date: 2013-03-15

URL: CVE-2012-6544

CVSS 3 Score Details (2.9)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: High - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: Low - Integrity Impact: None - Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://nvd.nist.gov/vuln/detail/CVE-2012-6544

Release Date: 2013-03-15

Fix Resolution: 3.6


Step up your Open Source Security Game with Mend here