PT-2016-7830 · Bluez+3 · Bluez+3

Op7Ic \\X00

·

Publicado

2016-10-30

·

Atualizado

2019-10-18

·

CVE-2016-9802

CVSS v3.1

5.3

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions BlueZ version 5.42
Description A buffer over-read issue was identified in the l2cap packet function in the monitor/packet.c source file. This issue can be triggered by processing a corrupted dump file, resulting in a btmon crash.
Recommendations For BlueZ version 5.42, as a temporary workaround, consider disabling the l2cap packet function in the monitor/packet.c source file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-2219
CVE-2016-9802
OPENSUSE-SU-2019:1476-1
OPENSUSE-SU-2019_1476-1
SUSE-SU-2019:1339-1
SUSE-SU-2019:1353-1
SUSE-SU-2019:1353-2

Produtos afetados

Alt Linux
Bluez
Debian
Suse