kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-16 22:39:48 +00:00
Code Issues Releases Packages Activity
linux/net/bluetooth/hidp
History
Young Xiao acaf43aa7e Bluetooth: hidp: fix buffer overflow 
commit a1616a5ac9 upstream.

Struct ca is copied from userspace. It is not checked whether the "name"
field is NULL terminated, which allows local users to obtain potentially
sensitive information from kernel stack memory, via a HIDPCONNADD command.

This vulnerability is similar to CVE-2011-1079.

Signed-off-by: Young Xiao <YangX92@hotmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
History 2019-06-20 18:11:27 +01:00
..
core.c Bluetooth: hidp: buffer overflow in hidp_process_report 2018-09-25 23:47:25 +01:00
hidp.h HID: Bluetooth: hidp: make sure input buffers are big enough 2014-02-17 21:17:55 +01:00
Kconfig HID: Fix the generic Kconfig options 2012-06-25 17:25:00 +02:00
Makefile Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
sock.c Bluetooth: hidp: fix buffer overflow 2019-06-20 18:11:27 +01:00