cve/2023/CVE-2023-2002.md

22 lines
952 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2023-2002](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2002)
![](https://img.shields.io/static/v1?label=Product&message=Kernel&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-250&color=brighgreen)
### Description
A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.
### POC
#### Reference
- https://www.openwall.com/lists/oss-security/2023/04/16/3
#### Github
- https://github.com/CVEDB/awesome-cve-repo
- https://github.com/CVEDB/top
- https://github.com/hktalent/TOP
- https://github.com/lrh2000/CVE-2023-2002
- https://github.com/nomi-sec/PoC-in-GitHub