PT-2016-7828 · Bluez+3 · Bluez+3
Op7Ic
·
Publicado
2016-10-30
·
Atualizado
2026-05-05
·
CVE-2016-9800
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
BlueZ version 5.42
Description
A buffer overflow issue was found in the
pin code reply dump function, located in the tools/parser/hci.c source file. This occurs because the pin array is overflowed by a supplied parameter due to a lack of boundary checks on the size of the buffer from the pin code reply cp *cp parameter.Recommendations
For BlueZ version 5.42, consider disabling the
pin code reply dump function until a patch is available to prevent potential exploitation of this issue.Exploit
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Bluez
Debian
Suse