CVE-2018-16270

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path...

CVE-2018-16270

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path...

CVE-2018-16270

The CVE concerns Samsung Galaxy Gear series prior to build RE2, where the hcidump utility lacks privilege/permission restrictions. The vulnerability allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path, indicating exposure of sensitive Bluetooth data. The provide...

CVE-2018-16270

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path...

EulerOS 2.0 SP3 : bluez (EulerOS-SA-2019-2559)

According to the versions of the bluez packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In BlueZ 5.42, a buffer overflow was observed in 'commandsdump' function in 'tools/parser/csr.c' source file. The issue exists because 'commands'...

CVE-2016-9917

In BlueZ 5.42, a buffer overflow was observed in "readn" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

BlueZ Buffer Overflow Vulnerability

BlueZ is an official Bluetooth stack for Linux. A buffer overflow vulnerability exists in the 'readn' function of the tools/hcidump.c source file in BlueZ version 5.42. An attacker can exploit this vulnerability to cause hcidump to crash with the help of a corrupted dump file...

CVE-2016-9917

In BlueZ 5.42, a buffer overflow was observed in "readn" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

DEBIAN-CVE-2016-9917

In BlueZ 5.42, a buffer overflow was observed in "readn" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9917

In BlueZ 5.42, a buffer overflow was observed in "readn" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9917

In BlueZ 5.42, a buffer overflow was observed in "readn" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

UBUNTU-CVE-2016-9917

In BlueZ 5.42, a buffer overflow was observed in "readn" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9917

In BlueZ 5.42, a buffer overflow was observed in "readn" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9917

In BlueZ 5.42, a buffer overflow was observed in "readn" function in "tools/hcidump.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9917

In BlueZ, CVE-2016-9917 is a buffer overflow in read_n() inside tools/hcidump.c (BlueZ 5.42) that can be triggered by a corrupted dump, leading to hcidump crash. Connected sources also enumerate related CVEs (e.g., 2016-9797, 2016-9798, 2016-9800–9804, 2016-9918) associated with BlueZ components,...

BlueZ Content Misreference Vulnerability

BlueZ is an official Bluetooth stack for Linux. A content misreference vulnerability exists in the 'confopt' function in the tools/parser/l2cap.c source file in BlueZ version 5.42. An attacker can cause a denial of service hcidump crash by running a compromised dump file...

BlueZ Buffer Overflow Vulnerability

BlueZ is an official Bluetooth stack for Linux. A buffer overflow vulnerability exists in the 'l2capdump' function in the tools/parser/l2cap.c source file in BlueZ version 5.42. An attacker can exploit this vulnerability to cause a denial of service hcidump crash...

CVE-2016-9804

In BlueZ 5.42, a buffer overflow was observed in "commandsdump" function in "tools/parser/csr.c" source file. The issue exists because "commands" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "frm-ptr" parameter. This issue can be...

CVE-2016-9797

In BlueZ 5.42, a buffer over-read was observed in "l2capdump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

CVE-2016-9798

In BlueZ 5.42, a use-after-free was identified in "confopt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...