CVE-2013-0349: Infoleak
Last updated 24 July 2024
Other sources
Linux kernel built with Bluetooth stack and HIDP support HCONFIGBT=y/m & CONFIGBTHIDP=y/m is vulnerable to an information disclosure flaw caused by wrongly initialising the hiddevice->name, physical location and unique identifier variables. Information leakage happens if these variables are not NULL('\0') terminated.
A privileged(CAPNETADMIN) user/program could cause this via ioctl(HIDPCONNADD) call.
Upstream fix: -> https://git.kernel.org/linus/0a9ab9bdb3e891762553f667066190c1d22ad62b
— Red Hat
The hidpsetuphid function in net/bluetooth/hidp/core.c in the Linux kernel before 3.7.6 does not properly copy a certain name field, which allows local users to obtain sensitive information from kernel memory by setting a long name and making an HIDPCONNADD ioctl call.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0349?
CVE-2013-0349 has a medium severity rating due to its potential for information disclosure.
How do I fix CVE-2013-0349?
To fix CVE-2013-0349, update your Linux kernel to a version greater than 3.7.5 or apply the recommended patches from your distribution.
What types of Linux kernel versions are affected by CVE-2013-0349?
CVE-2013-0349 affects Linux kernel versions up to and including 3.7.5, along with several earlier release candidates.
What causes the vulnerability in CVE-2013-0349?
The vulnerability in CVE-2013-0349 is caused by improper initialization of variables in the Bluetooth stack and HIDP support.
Is CVE-2013-0349 exploitable in a typical user environment?
While CVE-2013-0349 is a vulnerability that could lead to information disclosure, its exploitability may depend on specific configurations and use cases.