CVE-2016-10391

In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity...

CVE-2016-10391

In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity...

hci-iweb.iwr.uni-heidelberg.de XSS vulnerability

Vulnerable URL: https://hci-iweb.iwr.uni-heidelberg.de/osTicket/file.php?key=lvfbpv4t6t8j9eswlvnxfgsa9uxkjirm=1501718400=a4c9921da16fc4cec2f12a027a0888aa90f39081 Details: Description| Value ---|--- Patched:| Yes, at 05.08.2017 Latest check for patch:| 05.08.2017 13:45 GMT Vulnerability type:| XSS...

BlueZ read-across-the-border vulnerability (CNVD-2016-11953)

BlueZ is an official Bluetooth stack for Linux. A security vulnerability exists in the 'lemetaevdump' function in the tools/parser/hci.c source file of BlueZ version 5.42. An attacker can exploit this vulnerability to read data across boundaries...

DEBIAN-CVE-2016-9803

In BlueZ 5.42, an out-of-bounds read was observed in "lemetaevdump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' which is used to read correct element from 'evlemetastr' array is overflowed...

CVE-2016-9803

In BlueZ 5.42, an out-of-bounds read was observed in "lemetaevdump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' which is used to read correct element from 'evlemetastr' array is overflowed...

PT-2016-7831 · Bluez +3 · Bluez +3

Name of the Vulnerable Software and Affected Versions: BlueZ version 5.42 Description: An out-of-bounds read issue was found in the le meta ev dump function, located in the tools/parser/hci.c source file. This occurs because the subevent variable, used to read the correct element from the ev le...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the Bluetooth HCI interface in the Mac OS X operating system is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure memory corruption...

Memory corruption

The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-7108

The CVE-2015-7108 entry affects the Bluetooth HCI interface in Apple OS X prior to 10.11.2, where a memory corruption vulnerability in the HCI path allows local users to gain privileges or cause a denial of service. Root cause is memory corruption via unspecified vectors in the Bluetooth HCI hand...

CVE-2015-7108

The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-3683

The Bluetooth HCI interface implementation in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Memory corruption

The Bluetooth HCI interface implementation in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

openSUSE Security Update : wireshark (openSUSE-SU-2013:0276-1)

wireshark was updated to 1.8.5 to fix bugs and security issues. Vulnerabilities fixed : - Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01 CVE-2013-1572 CVE-2013-1573 CVE-2013-1574...

wireshark: Integer overflows in BACapp and Bluetooth HCI dissectors, leading to DoS (wnpa-sec-2012-08)

Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service infinite loop via vectors related to the 1 BACapp and 2 Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392...

Code injection

The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service application crash via a crafted packet that is not properly handled by the wmemblockalloc function in...

CVE-2013-5717

The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service application crash via a crafted packet that is not properly handled by the wmemblockalloc function in...

Oracle Linux 6 : kernel (ELSA-2013-1173)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1173 advisory. - x86 perf/x86: Fix offcorersp valid mask for SNB/IVB Nikola Pajkovsky 971314 971315 CVE-2013-2146 - bluetooth L2CAP - Fix info leak via getsockname...

DEBIAN-CVE-2012-6544

The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the 1 L2CAP or 2 HCI implementation...

CVE-2012-6544

The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the 1 L2CAP or 2 HCI implementation...