CVE-2020-12351
HIGHLinux Kernel 4.7.7-4.9.239 - Unauthenticated Privilege Escalation via BlueZ Input Validation
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2020-12351. PoCs published by naren-jayram.
AI-analyzed exploit summary This PoC exploits a heap-based type confusion vulnerability in the Linux L2CAP implementation (CVE-2020-12351) by sending a malicious L2CAP packet over a BLE connection. The exploit targets the BlueZ stack and demonstrates the vulnerability by triggering the type confusion via a crafted packet.
Description
Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
Exploits (2)
This PoC exploits a heap-based type confusion vulnerability in the Linux L2CAP implementation (CVE-2020-12351) by sending a malicious L2CAP packet over a BLE connection. The exploit targets the BlueZ stack and demonstrates the vulnerability by triggering the type confusion via a crafted packet.
This is a functional exploit for CVE-2020-12351, demonstrating a zero-click RCE vulnerability in the Linux Kernel's Bluetooth stack (BleedingTooth). It leverages heap spraying and KASLR bypass to achieve remote code execution on vulnerable systems.
References (2)
Scores
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H