Every CVESearch/Get API key

CVE-2011-2497

Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux...

8.3 High

CVE-2011-2497 is a high vulnerability (CVSS 8.3) in Linux Kernel, published August 29, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. No source names a fixed version.

What does this mean?
Severity
8.3 HighCVSS 2.0, NVD
Exploit chance
1.97%EPSS, 80th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.

Exploit likelihood

1.97%Unchanged since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-2.6
Debian:6.0
From an advisory covering 18 CVEs
before 2.6.32-35squeeze1, plus listed versions
2.6.32-302.6.32-30+m68k.52.6.32-312.6.32-31~bpo50+12.6.32-32
Show 5 moreShow less
2.6.32-332.6.32-342.6.32-34squeeze12.6.32-352.6.32-35~bpo50+1
2.6.32-35squeeze1
linux-2.6
Debian:5.0
From an advisory covering 17 CVEs
before 2.6.26-26lenny4, plus listed versions
2.6.26-132.6.26-13lenny22.6.26-13lenny2~bpo40+12.6.26-142.6.26-15
Show 35 moreShow less
2.6.26-15lenny12.6.26-15lenny22.6.26-15lenny32.6.26-15~bpo40+12.6.26-15~bpo40+22.6.26-162.6.26-172.6.26-17lenny12.6.26-17lenny22.6.26-17lenny2~bpo40+12.6.26-17~bpo40+12.6.26-182.6.26-192.6.26-19lenny12.6.26-19lenny22.6.26-19~bpo40+12.6.26-202.6.26-20~bpo40+12.6.26-212.6.26-21lenny12.6.26-21lenny22.6.26-21lenny32.6.26-21lenny42.6.26-21~bpo40+12.6.26-222.6.26-22lenny12.6.26-232.6.26-242.6.26-24lenny12.6.26-252.6.26-25lenny12.6.26-262.6.26-26lenny12.6.26-26lenny22.6.26-26lenny3
2.6.26-26lenny4
kernel
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-bootwrapper
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debug
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debuginfo-common-i686
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debuginfo-common-ppc64
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
Show 26 moreShow less
Affected packages
PackageAffectedFixed
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-doc
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-firmware
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-headers
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-kdump
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-kdump-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-kdump-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
perf
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
perf-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.6.32-131.12.1.el6
0:2.6.32-131.12.1.el6
kernel-rt
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-debug
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-debug-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-debug-devel
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-devel
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-doc
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-firmware
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-trace
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-trace-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-trace-devel
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-vanilla
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-vanilla-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt
kernel-rt-vanilla-devel
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 33 CVEs
before 0:2.6.33.9-rt31.75.el6rt
0:2.6.33.9-rt31.75.el6rt

What each source reports

NVD Score used8.3

Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.

Record
CVE-2011-2497
CVSS 2.0
8.3 HighAV:A/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-191
Updated
2026-11-02
CVE ListNo score

Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.

Record
CVE-2011-2497
Updated
2026-11-02
EUVDEUVD-2011-2484No score

Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.

Record
EUVD-2011-2484
Updated
2026-11-03
GitHub AdvisoriesGHSA-65mg-fq5m-qr37No score

Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux...

Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.

Record
GHSA-65mg-fq5m-qr37
Weakness
CWE-191
Updated
2026-11-02
OSVUBUNTU-CVE-2011-2497No score

Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.

Record
UBUNTU-CVE-2011-2497
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 171 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open