Skip to content
OpenAdvisories
Unscored Public exploit CVE-2017-1000251 EUVD-2017-1512GHSA-qhfx-x9j9-g24p

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vul…

Published Sep 12, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 4.12.13-1 —
Debian 13 linux 4.12.13-1 —
Debian 12 linux 4.12.13-1 —
Debian 9 linux 4.9.30-2+deb9u5 DSA-3981-1
Debian 8 linux 3.16.43-2+deb8u5 DSA-3981-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Debian 7 linux 3.2.93-1 DLA-1099-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-gke +3 No fix yet —
Ubuntu 16.04 LTS linux 4.4.0-96.119 USN-3420-1
Ubuntu 16.04 LTS linux-aws 4.4.0-1035.44 USN-3420-1
Ubuntu 16.04 LTS linux-azure 4.13.0-1005.7 —
Ubuntu 16.04 LTS linux-gcp 4.10.0-1006.6 —
Ubuntu 16.04 LTS linux-gke 4.4.0-1031.31 USN-3420-1
Ubuntu 16.04 LTS linux-hwe 4.10.0-37.41~16.04.1 USN-3419-2
Ubuntu 16.04 LTS linux-kvm 4.4.0-1007.12 USN-3420-1
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1074.82 USN-3420-1
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1076.81 USN-3420-1
Ubuntu 14.04 LTS linux 3.13.0-132.181 USN-3422-1
Ubuntu 14.04 LTS linux-lts-xenial 4.4.0-96.119~14.04.1 USN-3420-2
ReleasePackageFixed inAdvisory
RHEL 7 kernel-rt +10 3.10.0-693.2.2.rt56.623.el7 RHSA-2017:2704
RHEL 7 perf +18 3.10.0-693.2.2.el7 RHSA-2017:2679
RHEL 6 perf +16 2.6.32-696.10.2.el6 RHSA-2017:2681
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Mission Critical 6 perf +9 2.6.32-220.75.1.el6 RHSA-2017:2732
RHEL 7.3 EUS perf +18 3.10.0-514.28.2.el7 RHSA-2017:2680
RHEL 7.2 EUS perf +18 3.10.0-327.59.2.el7 RHSA-2017:2706
RHEL 6.7 EUS perf +16 2.6.32-573.45.2.el6 RHSA-2017:2682
RHEL 6.6 TUS perf +10 2.6.32-504.63.2.el6 RHSA-2017:2731
RHEL 6.6 AUS perf +10 2.6.32-504.63.2.el6 RHSA-2017:2731
RHEL 6.5 TUS perf +10 2.6.32-431.84.1.el6 RHSA-2017:2707
RHEL 6.5 AUS perf +10 2.6.32-431.84.1.el6 RHSA-2017:2707
RHEL 6.4 AUS perf +9 2.6.32-358.83.1.el6 RHSA-2017:2683
Red Hat MRG 2 kernel-rt +10 1:3.10.0-693.2.2.rt56.588.el6rt RHSA-2017:2705
ReleasePackageFixed inAdvisory
SLES 12 SP3 kernel-docs 4.4.82-6.6.3 SUSE-SU-2017:2523-1
SLES 12 SP3 kernel-syms +3 4.4.82-6.6.1 SUSE-SU-2017:2523-1
SLES 12 SP2 kernel-docs 4.4.74-92.38.3 SUSE-SU-2017:2521-1
SLES 12 SP2 kernel-syms +3 4.4.74-92.38.1 SUSE-SU-2017:2521-1
SLES 12 SP1 kernel-xen +3 3.12.74-60.64.60.1 SUSE-SU-2017:2459-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_10 10-4.1 SUSE-SU-2017:2779-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_11 9-4.1 SUSE-SU-2017:2786-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_12 8-4.1 SUSE-SU-2017:2783-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_13 7-4.1 SUSE-SU-2017:2782-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_14 6-4.1 SUSE-SU-2017:2790-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_15 +1 5-4.1 SUSE-SU-2017:2788-1, SUSE-SU-2017:2787-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_17 4-4.1 SUSE-SU-2017:2793-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_18 +2 3-4.1 SUSE-SU-2017:2797-1, SUSE-SU-2017:2796-1, SUSE-SU-2017:2792-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_21 1-2.1 SUSE-SU-2017:2459-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_8 12-4.1 SUSE-SU-2017:2785-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_9 11-4.1 SUSE-SU-2017:2778-1
SLES 12 kernel-ec2 +4 3.12.61-52.92.1 SUSE-SU-2017:2534-1, SUSE-SU-2017:2459-1
SLES 12 kgraft-patch-SLE12_Update_16 10-4.1 SUSE-SU-2017:2776-1
SLES 12 kgraft-patch-SLE12_Update_17 +1 9-4.1 SUSE-SU-2017:2784-1, SUSE-SU-2017:2777-1
SLES 12 kgraft-patch-SLE12_Update_19 8-4.1 SUSE-SU-2017:2771-1
SLES 12 kgraft-patch-SLE12_Update_20 6-4.1 SUSE-SU-2017:2769-1
SLES 12 kgraft-patch-SLE12_Update_21 +1 5-4.1 SUSE-SU-2017:2780-1, SUSE-SU-2017:2772-1
SLES 12 kgraft-patch-SLE12_Update_23 4-4.1 SUSE-SU-2017:2770-1
SLES 12 kgraft-patch-SLE12_Update_24 +2 3-4.1 SUSE-SU-2017:2781-1, SUSE-SU-2017:2774-1, SUSE-SU-2017:2773-1
SLES 12 kgraft-patch-SLE12_Update_27 1-2.1 SUSE-SU-2017:2534-1
SLES 11 SP4 kernel-docs 3.0.101-108.10.2 SUSE-SU-2017:2548-1
SLES 11 SP4 kernel-ec2 +8 3.0.101-108.10.1 SUSE-SU-2017:2548-1
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 11 SP3 kernel-ec2 +7 3.0.101-0.47.106.11.1 SUSE-SU-2018:0040-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.82-6.6.1 SUSE-SU-2017:2523-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.74-92.38.1 SUSE-SU-2017:2521-1
SLES for SAP 12 SP1 kernel-xen +3 3.12.74-60.64.60.1 SUSE-SU-2017:2459-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_10 10-4.1 SUSE-SU-2017:2779-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_11 9-4.1 SUSE-SU-2017:2786-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_12 8-4.1 SUSE-SU-2017:2783-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_13 7-4.1 SUSE-SU-2017:2782-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_14 6-4.1 SUSE-SU-2017:2790-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_15 +1 5-4.1 SUSE-SU-2017:2788-1, SUSE-SU-2017:2787-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_17 4-4.1 SUSE-SU-2017:2793-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_18 +2 3-4.1 SUSE-SU-2017:2797-1, SUSE-SU-2017:2796-1, SUSE-SU-2017:2792-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_21 1-2.1 SUSE-SU-2017:2459-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_8 12-4.1 SUSE-SU-2017:2785-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_9 11-4.1 SUSE-SU-2017:2778-1
SLES for SAP 11 SP4 kernel-ec2 +8 3.0.101-108.10.1 SUSE-SU-2017:2548-1
SLE Real Time 12 SP2 kernel-rt +3 4.4.88-18.1 SUSE-SU-2017:2956-1
SLE Real Time 11 SP4 kernel-rt +3 3.0.101.rt130-69.8.1 SUSE-SU-2017:2694-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_1 2-2.1 SUSE-SU-2017:2794-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_2 1-2.1 SUSE-SU-2017:2523-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_0 10-18.13.1 SUSE-SU-2017:2801-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_1 10-4.1 SUSE-SU-2017:2802-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_11 +1 3-4.1 SUSE-SU-2017:2816-1, SUSE-SU-2017:2806-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_13 1-2.1 SUSE-SU-2017:2521-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_2 +2 9-4.1 SUSE-SU-2017:2811-1, SUSE-SU-2017:2805-1, SUSE-SU-2017:2803-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_5 7-4.1 SUSE-SU-2017:2798-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_6 6-4.1 SUSE-SU-2017:2807-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_7 +1 5-4.1 SUSE-SU-2017:2809-1, SUSE-SU-2017:2799-1
SLE Live Patching 12 kgraft-patch-SLE12-SP2_Update_9 +1 4-4.1 SUSE-SU-2017:2804-1, SUSE-SU-2017:2800-1
SUSE OpenStack Cloud 6 kernel-xen +3 3.12.74-60.64.60.1 SUSE-SU-2017:2459-1
SUSE OpenStack Cloud 6 kgraft-patch-SLE12-SP1_Update_21 1-2.1 SUSE-SU-2017:2459-1
SUSE Linux Enterprise Point of Sale 11 SP3 kernel-ec2 +6 3.0.101-0.47.106.11.1 SUSE-SU-2018:0040-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed kernel-source 5.14.6-1.4 openSUSE-SU-2024:13704-1, openSUSE-SU-2024:10728-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 dtrace-modules-3.8.13-118.19.7.el6uek 0.4.5-3.el6 ELSA-2017-3621
Oracle Linux 7 dtrace-modules-3.8.13-118.19.7.el7uek 0.4.5-3.el7 ELSA-2017-3621
Oracle Linux 7 dtrace-modules-4.1.12-103.3.8.1.el6uek 0.6.1-3.el6 ELSA-2017-3620
Oracle Linux 7 dtrace-modules-4.1.12-103.3.8.1.el7uek 0.6.1-3.el7 ELSA-2017-3620
Oracle Linux 7 kernel-uek +5 3.8.13-118.19.7.el7uek ELSA-2017-3621, ELSA-2017-3620
Oracle Linux 7 perf +11 3.10.0-693.2.2.el7 ELSA-2017-2679

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Exploit-DB 1

GitHub 5 repositories

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 50

References