Information disclosure in Linux Kernel

CVE-2013-0349

The hidp_setup_hid function in net/bluetooth/hidp/core.c in the Linux kernel before 3.7.6 does not properly copy a certain name field, which allows local users to obtain sensitive information from kernel memory by setting a long name and making an HIDPCONNADD ioctl call.

Vulnerability class: Information Disclosure

EPSS: 0.003 (25.1th percentile) — read the EPSS interpretation.