UBUNTU-CVE-2017-1000251

    Dashboard / Vulnerabilities / UBUNTU-CVE-2017-1000251

    UBUNTU-CVE-2017-1000251

    Published: 12 Sept 2017Last Modified: 22 Apr 2026
    Aliases:
    USN-3419-1
    USN-3419-2
    USN-3420-1

    Summary:

    Details: The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.

    References: https://ubuntu.com/security/CVE-2017-1000251, https://www.armis.com/blueborne, https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/BlueBorne, https://ubuntu.com/security/notices/USN-3419-1, https://ubuntu.com/security/notices/USN-3419-2, https://ubuntu.com/security/notices/USN-3420-1, https://ubuntu.com/security/notices/USN-3420-2, https://ubuntu.com/security/notices/USN-3422-1, https://ubuntu.com/security/notices/USN-3422-2, https://ubuntu.com/security/notices/USN-3423-1, https://www.cve.org/CVERecord?id=CVE-2017-1000251

    Affected packages

    Package

    Name: linux

    Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=trusty

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -3.13.0-132.181

    Affected versions

    3.11.0-12.19

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High