CVE-2017-1000251 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2017-1000251

Deferred

More Info Official Page

Source-cve@mitre.org

Published At-12 Sep, 2017 | 17:29

Updated At-20 Apr, 2025 | 01:37

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.0	HIGH	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.7	HIGH	AV:A/AC:L/Au:S/C:C/I:C/A:C

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 2.6.32(inclusive) to 3.2.94(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 3.3(inclusive) to 3.16.49(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 3.17(inclusive) to 3.18.71(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 3.19(inclusive) to 4.1.45(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.2(inclusive) to 4.4.88(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.5(inclusive) to 4.9.50(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.10(inclusive) to 4.12.13(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.13(inclusive) to 4.13.2(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>8.0

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>9.0

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

NVIDIA Corporation

>>jetson_tk1>>r21

cpe:2.3:a:nvidia:jetson_tk1:r21:*:*:*:*:*:*:*

NVIDIA Corporation

>>jetson_tk1>>r24

cpe:2.3:a:nvidia:jetson_tk1:r24:*:*:*:*:*:*:*

NVIDIA Corporation

>>jetson_tx1>>r21

cpe:2.3:a:nvidia:jetson_tx1:r21:*:*:*:*:*:*:*

NVIDIA Corporation

>>jetson_tx1>>r24

cpe:2.3:a:nvidia:jetson_tx1:r24:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>-

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

>>enterprise_linux_desktop>>6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

>>enterprise_linux_desktop>>7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

>>enterprise_linux_server>>6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

>>enterprise_linux_server>>7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

>>enterprise_linux_server_aus>>6.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*

>>enterprise_linux_server_aus>>6.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*

>>enterprise_linux_server_aus>>6.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*

>>enterprise_linux_server_aus>>7.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*

>>enterprise_linux_server_aus>>7.3

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*

>>enterprise_linux_server_aus>>7.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

>>enterprise_linux_server_aus>>7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

>>enterprise_linux_server_aus>>7.7

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

>>enterprise_linux_server_eus>>6.7

cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*

>>enterprise_linux_server_eus>>7.2

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*

>>enterprise_linux_server_eus>>7.3

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*

>>enterprise_linux_server_eus>>7.4

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*

>>enterprise_linux_server_eus>>7.5

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*

>>enterprise_linux_server_eus>>7.6

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*

>>enterprise_linux_server_eus>>7.7

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*

>>enterprise_linux_server_tus>>6.5

cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*

>>enterprise_linux_server_tus>>6.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*

>>enterprise_linux_server_tus>>7.2

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*

>>enterprise_linux_server_tus>>7.3

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*

>>enterprise_linux_server_tus>>7.4

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*

>>enterprise_linux_server_tus>>7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

>>enterprise_linux_server_tus>>7.7

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*

>>enterprise_linux_workstation>>6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

>>enterprise_linux_workstation>>7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://nvidia.custhelp.com/app/answers/detail/a_id/4561	cve@mitre.org	Third Party Advisory
http://www.debian.org/security/2017/dsa-3981	cve@mitre.org	Third Party Advisory
http://www.securityfocus.com/bid/100809	cve@mitre.org	Patch Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039373	cve@mitre.org	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2017:2679	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2680	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2681	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2682	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2683	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2704	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2705	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2706	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2707	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2731	cve@mitre.org	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2732	cve@mitre.org	Third Party Advisory
https://access.redhat.com/security/vulnerabilities/blueborne	cve@mitre.org	Third Party Advisory
https://github.com/torvalds/linux/commit/f2fcfcd670257236ebf2088bbdf26f6a8ef459fe	cve@mitre.org	Patch Third Party Advisory
https://www.armis.com/blueborne	cve@mitre.org	Third Party Advisory
https://www.exploit-db.com/exploits/42762/	cve@mitre.org	Exploit Third Party Advisory VDB Entry
https://www.kb.cert.org/vuls/id/240311	cve@mitre.org	Third Party Advisory US Government Resource
https://www.synology.com/support/security/Synology_SA_17_52_BlueBorne	cve@mitre.org	Third Party Advisory
http://nvidia.custhelp.com/app/answers/detail/a_id/4561	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.debian.org/security/2017/dsa-3981	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.securityfocus.com/bid/100809	af854a3a-2127-422b-91ae-364da2661108	Patch Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039373	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2017:2679	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2680	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2681	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2682	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2683	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2704	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2705	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2706	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2707	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2731	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2732	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://access.redhat.com/security/vulnerabilities/blueborne	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://github.com/torvalds/linux/commit/f2fcfcd670257236ebf2088bbdf26f6a8ef459fe	af854a3a-2127-422b-91ae-364da2661108	Patch Third Party Advisory
https://www.armis.com/blueborne	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://www.exploit-db.com/exploits/42762/	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory VDB Entry
https://www.kb.cert.org/vuls/id/240311	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory US Government Resource
https://www.synology.com/support/security/Synology_SA_17_52_BlueBorne	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory