Beveiligingsadvies

CVE-2015-8575

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-02-08 02:00:00

Laatst bijgewerkt 2024-08-06 08:20:43

Toegewezen door microfocus

CVSS-score geen score

Status PUBLISHED

Beschrijving

The sco_sock_bind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not verify an address length, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application.

← Alle CVE's bekijken Bekijk op cve.org ↗