CVE-2016-9800: Improper Restriction of Operations within the Bounds of a Memory Buffer

In BlueZ 5.42, a buffer overflow was observed in "pincodereplydump" function in "tools/parser/hci.c" source file. The issue exists because "pin" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "pincodereplycp cp" parameter...

CVE-2016-9803: Improper Restriction of Operations within the Bounds of a Memory Buffer

In BlueZ 5.42, an out-of-bounds read was observed in "lemetaevdump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' which is used to read correct element from 'evlemetastr' array is overflowed...

CVE-2016-9797: Improper Restriction of Operations within the Bounds of a Memory Buffer

In BlueZ 5.42, a buffer over-read was observed in "l2capdump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9802: Improper Restriction of Operations within the Bounds of a Memory Buffer

In BlueZ 5.42, a buffer over-read was identified in "l2cappacket" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

PT-2016-7831

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description An out-of-bounds read issue was found in the le meta ev dump function, located in the tools/parser/hci.c source file. This occurs because the subevent variable, used to read the correct element from the ev le met...

PT-2016-7825

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description A buffer over-read issue was found in the l2cap dump function in the tools/parser/l2cap.c source file. This issue can be triggered by processing a corrupted dump file, resulting in an hcidump crash. Recommendatio...

PT-2016-7830

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description A buffer over-read issue was identified in the l2cap packet function in the monitor/packet.c source file. This issue can be triggered by processing a corrupted dump file, resulting in a btmon crash. Recommendatio...

PT-2016-7879

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description An out-of-bounds read issue was identified in the packet hexdump function in the monitor/packet.c source file. This issue can be triggered by processing a corrupted dump file, resulting in a btmon crash...

PT-2016-7878

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description A buffer overflow issue was found in the read n function in the tools/hcidump.c source file. This issue can be triggered by processing a corrupted dump file, resulting in the hcidump crash. Recommendations For...

PT-2016-7828

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description A buffer overflow issue was found in the pin code reply dump function, located in the tools/parser/hci.c source file. This occurs because the pin array is overflowed by a supplied parameter due to a lack of...

PT-2016-7827

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description A buffer overflow issue was found in the pklg read hci function in the btsnoop.c source file. This issue can be triggered by processing a corrupted dump file, resulting in a btmon crash. Recommendations For BlueZ...

PT-2016-7826

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description A use-after-free issue was identified in the conf opt function in the tools/parser/l2cap.c source file. This issue can be triggered by processing a corrupted dump file, resulting in an hcidump crash...

PT-2016-7829

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description A buffer overflow issue was found in the set ext ctrl function located in the tools/parser/l2cap.c source file when handling a corrupted dump file. Recommendations For BlueZ version 5.42, as a temporary workaroun...

PT-2016-7832

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description A buffer overflow issue was observed in the commands dump function in the tools/parser/csr.c source file. This issue occurs due to the lack of boundary checks on the size of the buffer from the frm-ptr parameter,...

PT-2017-9388

Name of the Vulnerable Software and Affected Versions BlueZ versions 5.41 and earlier Description A buffer overflow issue exists, allowing an attacker to execute arbitrary code via the parse line function used in some userland utilities. Recommendations For BlueZ versions 5.41 and earlier, at the...

Fedora Update for kf5-bluez-qt FEDORA-2016-4701636a74

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for kf5-bluez-qt FEDORA-2016-cef912e3a4

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Btproxy - Man In The Middle Analysis Tool For Bluetooth

Tested Devices Pebble Steel smart watch Moto 360 smart watch OBDLink OBD-II Bluetooth Dongle Withings Smart Baby Monitor If you have tried anything else, please let me know at conorpp at vt dot edu. Dependencies Need at least 1 Bluetooth card either USB or internal. Need to be running Linux,...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bluez-libs-devel-3.7 package in the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bluez-libs-devel-2.10 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...