CVE-2017-1000251
HIGHLinux Kernel 2.6.32-4.13.1 - Remote Code Execution via Bluetooth L2CAP Configuration Response
Title source: llmExploitation Summary
EIP tracks 10 public exploits for CVE-2017-1000251. PoCs published by Marcin Kozlowski, Miracle963, hayzamjs.
AI-analyzed exploit summary This is a Proof of Concept (PoC) for CVE-2017-1000251, demonstrating a Denial of Service (DoS) attack on Linux Bluetooth stacks by sending malformed L2CAP configuration requests. The exploit leverages Scapy to craft and send these packets, causing a crash in vulnerable systems.
Description
The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.
Exploits (10)
This is a Proof of Concept (PoC) for CVE-2017-1000251, demonstrating a Denial of Service (DoS) attack on Linux Bluetooth stacks by sending malformed L2CAP configuration requests. The exploit leverages Scapy to craft and send these packets, causing a crash in vulnerable systems.
This repository contains a functional PoC for CVE-2017-1000251, a Bluetooth stack vulnerability in Linux. The exploit sends malformed L2CAP packets to trigger a remote DoS by exploiting improper handling of L2CAP configuration requests.
This repository contains a functional proof-of-concept exploit for CVE-2017-1000251, a Bluetooth vulnerability. The exploit uses Scapy to craft and send malformed L2CAP packets to trigger a denial-of-service (DoS) condition on vulnerable devices.
This repository contains a functional proof-of-concept exploit for CVE-2017-1000251, a Bluetooth stack buffer overflow in Linux Kernel versions before 4.13.1. The exploit sends crafted L2CAP packets to trigger a DoS (crash) and includes shellcode to print a character in the kernel log.
This repository contains a functional Proof of Concept (PoC) for CVE-2017-1000251, a Bluetooth vulnerability affecting Linux kernels. The exploit leverages malformed L2CAP packets to trigger a heap overflow, demonstrating the vulnerability without a payload.
This repository contains a functional exploit for CVE-2017-1000251, a BlueBorne vulnerability affecting Linux kernel Bluetooth implementations. The exploit demonstrates remote code execution (RCE) by leveraging a stack-based buffer overflow in the Bluetooth stack.
This repository contains a functional exploit for CVE-2017-1000251, targeting the BlueBorne vulnerability in Bluetooth L2CAP implementations. The exploit leverages a stack-based buffer overflow to achieve remote code execution (RCE) on vulnerable devices, specifically tested against an Amazon Echo (1st Generation) and a TomTom MFD 1ME09 device.
This repository contains a functional exploit for CVE-2017-1000251, a BlueBorne vulnerability affecting Linux kernel Bluetooth implementations. The exploit uses Scapy to craft malicious L2CAP packets to trigger a heap overflow, potentially leading to remote code execution.
References (21)
Scores
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H