CVE-2016-9799

In BlueZ 5.42, a buffer overflow was observed in "pklgreadhci" function in "btsnoop.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

CVE-2016-9798

CVE-2016-9798 details (supported by connected docs): In BlueZ 5.42, a use-after-free exists in the conf_opt function (tools/parser/l2cap.c). The issue can be triggered by processing a corrupted dump file and results in a crash of hcidump. The available connected documents confirm the affected com...

CVE-2016-9800

CVE-2016-9800 affects BlueZ 5.42. The overflow occurs in pin_code_reply_dump (tools/parser/hci.c) where the pin array is overflowed due to missing boundary checks on the buffer size from cp parameter (pin_code_reply_cp *cp). This is a buffer overflow risk that could impact Bluetooth-related tooli...

CVE-2016-9803

In BlueZ 5.42, an out-of-bounds read was observed in "lemetaevdump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' which is used to read correct element from 'evlemetastr' array is overflowed...

CVE-2016-9803

In BlueZ 5.42, an out-of-bounds read was observed in "lemetaevdump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' which is used to read correct element from 'evlemetastr' array is overflowed...

CVE-2016-9799

In BlueZ 5.42, a buffer overflow was observed in "pklgreadhci" function in "btsnoop.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

CVE-2016-9804

In BlueZ 5.42, a buffer overflow was observed in "commandsdump" function in "tools/parser/csr.c" source file. The issue exists because "commands" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "frm-ptr" parameter. This issue can be...

CVE-2016-9802

CVE-2016-9802 is a BlueZ 5.42 vulnerability in the l2cap_packet function (monitor/packet.c) causing a buffer over-read when processing a corrupted dump, which can crash btmon. Connected documents (EulerOS/NE AMD/OpenVAS entries) corroborate BlueZ 5.42 issues affecting similar components (e.g., l2...

CVE-2016-9797

In BlueZ 5.42, a buffer over-read was observed in "l2capdump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9798

In BlueZ 5.42, a use-after-free was identified in "confopt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9801

In BlueZ 5.42, a buffer overflow was observed in "setextctrl" function in "tools/parser/l2cap.c" source file when processing corrupted dump file...

CVE-2016-9802

In BlueZ 5.42, a buffer over-read was identified in "l2cappacket" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

CVE-2016-9803

CVE-2016-9803 concerns BlueZ 5.42 where an out-of-bounds read occurs in le_meta_ev_dump (tools/parser/hci.c). The issue arises because the variable read index, ‘subevent’, overflows the ev_le_meta_str array, causing a read past the intended bounds. The connected documents corroborate this flaw an...

CVE-2016-9799

CVE-2016-9799 is a buffer overflow in BlueZ 5.42, specifically in pklg_read_hci inside btsnoop.c. The vulnerability can be triggered by processing a corrupted dump file and results in a btmon crash. The connected sources (NVD/OSV/CNVD references) confirm the flaw exists in BlueZ 5.42 and describe...

CVE-2016-9800

In BlueZ 5.42, a buffer overflow was observed in "pincodereplydump" function in "tools/parser/hci.c" source file. The issue exists because "pin" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "pincodereplycp cp" parameter...

CVE-2016-9797

In BlueZ 5.42, a buffer over-read was observed in "l2capdump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9802

In BlueZ 5.42, a buffer over-read was identified in "l2cappacket" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

PT-2016-7831 · Bluez +3 · Bluez +3

Name of the Vulnerable Software and Affected Versions: BlueZ version 5.42 Description: An out-of-bounds read issue was found in the le meta ev dump function, located in the tools/parser/hci.c source file. This occurs because the subevent variable, used to read the correct element from the ev le...

Fedora Update for kf5-bluez-qt FEDORA-2016-cef912e3a4

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for kf5-bluez-qt FEDORA-2016-4701636a74

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...