Bluetooth-Crash-CVE-2017-0785

CVE-2017-0785 Bloqueo del módulo Bluetooth Este script es una versión modificada de https://github.com/ojasookert/CVE-2017-0785. Filtra información a través de SDP debido a bytes fuera de los límites, pero enviar demasiados paquetes o solicitudes de búsqueda provoca que el módulo Bluetooth en un...

Security update for sofia-sip (important)

openSUSE Security Update: Security update for sofia-sip Announcement ID: openSUSE-SU-2026:0330-1 Rating: important References: 1200116 1200117 1200118 Cross-References: CVE-2022-31001 CVE-2022-31002 CVE-2022-31003 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes three...

openSUSE 16: libBasicUsageEnvironment2 / libUsageEnvironment3 / libgroupsock33 / etc (openSUSE-SU-2026:21863-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21863-1 advisory. Changes in live555: - Update to version 2026.08.25: Fixed a bug in VorbisAudioRTPSource that could have caused a malicious SDP description to...

OESA-2026-3732 bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: A vulnerability, which was classified as very critical, was found in Linux BlueZ version now known.CWE is classifying the issue as CWE-121. A...

OESA-2026-3730 bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: A vulnerability, which was classified as very critical, was found in Linux BlueZ version now known.CWE is classifying the issue as CWE-121. A...

OESA-2026-3729 bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: A vulnerability, which was classified as very critical, was found in Linux BlueZ version now known.CWE is classifying the issue as CWE-121. A...

Astra Linux – Vulnerability in Wireshark

A buffer overflow in the Bluetooth SDP dissector in Wireshark versions 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows for denial of service through packet injection or malicious capture files...

Astra Linux – Vulnerability in Wireshark

The BT SDP dissector has an infinite loop in Wireshark versions 4.0.0 to 4.0.7, and 3.6.0 to 3.6.15. This issue allows for denial of service through packet injection or with crafted capture files...

Astra Linux – Vulnerability in Wireshark

A memory leak in the BT SDP dissector in Wireshark versions 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows for denial of service through packet injection or malicious capture files...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fixed the issue of using an uninitialized rtpaddr in the processsdp function. The processsdp function declares a union named rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after...

CVE-2026-5132

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit size of unpacked SDP messages compressed with zlib, which allows attacker to deny service or crash server via sending many SDP messages that unpack to large size.. Mattermost Advisory ID:...

CVE-2026-5132

Mattermost versions 11.9.x ≤ 11.9.0, 11.8.x ≤ 11.8.4, 11.7.x ≤ 11.7.7, and 10.11.x ≤ 10.11.22 fail to limit the size of unpacked SDP messages compressed with zlib in Calls WebSocket messages. An authenticated attacker (low privileges) can send many SDP messages that decompress to a large size, ca...

CVE-2026-5132 Unbounded zlib decompression in Calls SDP WebSocket messages

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit size of unpacked SDP messages compressed with zlib, which allows attacker to deny service or crash server via sending many SDP messages that unpack to large size.. Mattermost Advisory ID:...

EUVD-2026-77370

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit size of unpacked SDP messages compressed with zlib, which allows attacker to deny service or crash server via sending many SDP messages that unpack to large size.. Mattermost Advisory ID:...

CVE-2026-5132 Unbounded zlib decompression in Calls SDP WebSocket messages

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit size of unpacked SDP messages compressed with zlib, which allows attacker to deny service or crash server via sending many SDP messages that unpack to large size.. Mattermost Advisory ID:...

PT-2026-91148

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit size of unpacked SDP messages compressed with zlib, which allows attacker to deny service or crash server via sending many SDP messages that unpack to large size.. Mattermost Advisory ID:...

CVE-2026-5132: Improper Handling of Highly Compressed Data (Data Amplification)

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit size of unpacked SDP messages compressed with zlib, which allows attacker to deny service or crash server via sending many SDP messages that unpack to large size.. Mattermost Advisory ID:...

Fedora 45 : bluez (2026-84b4f1c43a)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-84b4f1c43a advisory. BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP X...

CVE-2026-57159

A flaw was found in PJSIP. An out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. A remote attacker can trigger this via payload-type numbers taken from a remote SDP offer or answer, which are used as an index to access...

Linux Distros Unpatched Vulnerability : CVE-2026-57159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the S...