Lucene search

K
nvd[email protected]NVD:CVE-2008-2374
HistoryJul 07, 2008 - 11:41 p.m.

CVE-2008-2374

2008-07-0723:41:00
CWE-1284
web.nvd.nist.gov
7

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

High

EPSS

0.009

Percentile

82.5%

src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field that triggers excessive memory allocation or a buffer over-read.

Affected configurations

Nvd
Node
bluezbluez-libsRange<3.34
OR
bluezbluez-utilsRange<3.34
Node
fedoraprojectfedoraMatch8
OR
fedoraprojectfedoraMatch9
VendorProductVersionCPE
bluezbluez-libs*cpe:2.3:a:bluez:bluez-libs:*:*:*:*:*:*:*:*
bluezbluez-utils*cpe:2.3:a:bluez:bluez-utils:*:*:*:*:*:*:*:*
fedoraprojectfedora8cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*
fedoraprojectfedora9cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*

References

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

High

EPSS

0.009

Percentile

82.5%