| CVE-2011-2497 | Date: (C)2011-08-29 (M)2024-01-04 |
Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.
CVSS Score and Metrics +CVSS Score and Metrics -| CVSS V2 Severity: |
| CVSS Score : 8.3 |
| Exploit Score: 6.5 |
| Impact Score: 10.0 |
| |
| CVSS V2 Metrics: |
| Access Vector: ADJACENT_NETWORK |
| Access Complexity: LOW |
| Authentication: NONE |
| Confidentiality: COMPLETE |
| Integrity: COMPLETE |
| Availability: COMPLETE |
| | |
