UBUNTU-CVE-2023-2002
Dashboard / Vulnerabilities / UBUNTU-CVE-2023-2002
UBUNTU-CVE-2023-2002
Summary:
Details: A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.
References: https://ubuntu.com/security/CVE-2023-2002, https://www.openwall.com/lists/oss-security/2023/04/16/3, https://github.com/lrh2000/CVE-2023-2002, https://lore.kernel.org/linux-bluetooth/[email protected]/, https://lore.kernel.org/linux-bluetooth/[email protected]/, https://ubuntu.com/security/notices/USN-6173-1, https://ubuntu.com/security/notices/USN-6283-1, https://ubuntu.com/security/notices/USN-6300-1, https://ubuntu.com/security/notices/USN-6311-1, https://ubuntu.com/security/notices/USN-6332-1, https://ubuntu.com/security/notices/USN-6340-1, https://ubuntu.com/security/notices/USN-6347-1, https://ubuntu.com/security/notices/USN-6349-1, https://ubuntu.com/security/notices/USN-6340-2, https://ubuntu.com/security/notices/USN-6357-1, https://ubuntu.com/security/notices/USN-6385-1, https://ubuntu.com/security/notices/USN-6397-1, https://ubuntu.com/security/notices/USN-6701-1, https://ubuntu.com/security/notices/USN-6701-2, https://ubuntu.com/security/notices/USN-6701-3, https://ubuntu.com/security/notices/USN-6701-4, https://www.cve.org/CVERecord?id=CVE-2023-2002
Affected packages
Package
Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=trusty%2Fesm
Affected ranges
Type: ECOSYSTEM
Events:
