cve/2013/CVE-2013-0349.md

CVE-2013-0349

Description

The hidp_setup_hid function in net/bluetooth/hidp/core.c in the Linux kernel before 3.7.6 does not properly copy a certain name field, which allows local users to obtain sensitive information from kernel memory by setting a long name and making an HIDPCONNADD ioctl call.

POC

Reference

• http://www.ubuntu.com/usn/USN-1808-1

Github

No PoCs found on GitHub currently.