CVE-2016-9917

In BlueZ 5.42, a buffer overflow was observed in "readn" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

UBUNTU-CVE-2016-9917

In BlueZ 5.42, a buffer overflow was observed in "readn" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

UBUNTU-CVE-2016-9918

In BlueZ 5.42, an out-of-bounds read was identified in "packethexdump" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

CVE-2016-9918

CVE-2016-9918 is an out-of-bounds read in BlueZ 5.42, specifically in monitor/packet.c (packet_hexdump). It can be triggered by processing a corrupted dump file and will cause btmon to crash. Connected documents (EulerOS/Nessus/OpenVAS) confirm the issue in BlueZ 5.42 and list affected platforms,...

CVE-2016-9918

In BlueZ 5.42, an out-of-bounds read was identified in "packethexdump" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

CVE-2016-9917

In BlueZ 5.42, a buffer overflow was observed in "readn" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9917

In BlueZ 5.42, a buffer overflow was observed in "readn" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9917

In BlueZ, CVE-2016-9917 is a buffer overflow in read_n() inside tools/hcidump.c (BlueZ 5.42) that can be triggered by a corrupted dump, leading to hcidump crash. Connected sources also enumerate related CVEs (e.g., 2016-9797, 2016-9798, 2016-9800–9804, 2016-9918) associated with BlueZ components,...

CVE-2016-9918

In BlueZ 5.42, an out-of-bounds read was identified in "packethexdump" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

BlueZ Content Misreference Vulnerability

BlueZ is an official Bluetooth stack for Linux. A content misreference vulnerability exists in the 'confopt' function in the tools/parser/l2cap.c source file in BlueZ version 5.42. An attacker can cause a denial of service hcidump crash by running a compromised dump file...

BlueZ Buffer Overflow Vulnerability

BlueZ is an official Bluetooth stack for Linux. A buffer overflow vulnerability exists in the 'l2capdump' function in the tools/parser/l2cap.c source file in BlueZ version 5.42. An attacker can exploit this vulnerability to cause a denial of service hcidump crash...

CVE-2016-9802

In BlueZ 5.42, a buffer over-read was identified in "l2cappacket" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

CVE-2016-9803

In BlueZ 5.42, an out-of-bounds read was observed in "lemetaevdump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' which is used to read correct element from 'evlemetastr' array is overflowed...

CVE-2016-9801

In BlueZ 5.42, a buffer overflow was observed in "setextctrl" function in "tools/parser/l2cap.c" source file when processing corrupted dump file...

CVE-2016-9804

In BlueZ 5.42, a buffer overflow was observed in "commandsdump" function in "tools/parser/csr.c" source file. The issue exists because "commands" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "frm-ptr" parameter. This issue can be...

CVE-2016-9797

In BlueZ 5.42, a buffer over-read was observed in "l2capdump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9798

In BlueZ 5.42, a use-after-free was identified in "confopt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9799

In BlueZ 5.42, a buffer overflow was observed in "pklgreadhci" function in "btsnoop.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

CVE-2016-9800

In BlueZ 5.42, a buffer overflow was observed in "pincodereplydump" function in "tools/parser/hci.c" source file. The issue exists because "pin" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "pincodereplycp cp" parameter...

BlueZ Out-of-Bounds Read Vulnerability

BlueZ is an official Bluetooth stack for Linux. A security vulnerability exists in the 'l2cappacket' function in the monitor/packet.c source file of BlueZ version 5.42. An attacker can exploit this vulnerability by running a compromised file to cause btmon to crash read across boundaries...