Lucene search
+L

1327 matches found

Cvelist
Cvelist
•added 2021/12/13 6:06 p.m.•35 views

CVE-2021-32024

A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...

9.8CVSS9.9AI score0.01786EPSS
SaveExploits0References1
CVE
CVE
•added 2021/12/13 6:06 p.m.•66 views

CVE-2021-32024

CVE-2021-32024 describes a remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4–7.1. The affected component is the BMP image codec; the underlying issue enables an attacker to potentially execute code within the context of the vulnerable process. Documente...

9.8CVSS9.6AI score0.01786EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/13 12:00 a.m.•3 views

CVE-2021-32024: Improper Validation of Specified Type of Input

A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...

9.8CVSS6.5AI score0.01786EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
•added 2021/12/10 12:00 a.m.•42 views

Security update for wireshark (moderate)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2021:1566-1 Rating: moderate References: 1192830 Cross-References: CVE-2021-39920 CVE-2021-39921 CVE-2021-39922 CVE-2021-39924 CVE-2021-39925 CVE-2021-39926 CVE-2021-39928 CVE-2021-39929 CVSS scores: CVE-2021-399...

4.3CVSS8.2AI score0.08139EPSS
SaveExploits8References1
Ubuntu
Ubuntu
•added 2021/12/08 6:16 p.m.•88 views

USN-5183-1: BlueZ vulnerability

Julian Rauchberger discovered that BlueZ incorrectly handled memory when processing SDP attribute requests. A remote attacker could use this issue to cause BlueZ to crash, leading to a denial of service, or possibly execute arbitrary code...

8.8CVSS6.8AI score0.01525EPSS
SaveExploits1
NVD
NVD
•added 2021/11/29 8:15 a.m.•28 views

CVE-2019-8921

An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrar...

6.5CVSS0.01007EPSS
SaveExploits1References3
OSV
OSV
•added 2021/11/29 8:15 a.m.•32 views

CVE-2019-8921

An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrar...

6.5CVSS8.7AI score
SaveExploits0References3
OSV
OSV
•added 2021/11/29 8:15 a.m.•28 views

UBUNTU-CVE-2019-8921

An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrar...

6.5CVSS7AI score0.01007EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2021/11/29 12:00 a.m.•33 views

CVE-2019-8921

An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrar...

6.5CVSS6.3AI score0.01007EPSS
SaveExploits1
CVE
CVE
•added 2021/11/29 12:00 a.m.•174 views

CVE-2019-8921

CVE-2019-8921 is a BlueZ Bluetooth stack vulnerability affecting bluetoothd, specifically in the SDP implementation. The issue arises from how SVC_ATTR_REQ is handled; by crafting a malicious CSTATE, an attacker could cause the server to return more bytes than the buffer can hold, leaking heap da...

6.5CVSS7.3AI score0.01007EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2021/11/29 12:00 a.m.•7 views

CVE-2019-8921

An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrar...

7AI score0.01007EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/11/29 12:00 a.m.•53 views

CVE-2019-8921

An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrar...

7.8AI score0.01007EPSS
SaveExploits1References3
OSV
OSV
•added 2021/11/20 7:31 p.m.•22 views

MGASA-2021-0518 Updated wireshark packages fix security vulnerability

IPPUSB dissector crash CVE-2021-39920. Modbus dissector crash CVE-2021-39921. C12.22 dissector crash CVE-2021-39922. PNRP dissector large loop wnpa-sec-2021-11. Bluetooth DHT dissector large loop CVE-2021-39924. Bluetooth SDP dissector crash CVE-2021-39925. Bluetooth HCIISO dissector crash...

7.5CVSS7.5AI score0.08139EPSS
SaveExploits8References17
OSV
OSV
•added 2021/11/19 5:15 p.m.•13 views

AZL-7413 CVE-2021-39925 affecting package wireshark for versions less than 3.4.14-1

Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file...

7.5CVSS7AI score0.08139EPSS
SaveExploits1References1
OSV
OSV
•added 2021/11/19 5:15 p.m.•35 views

CVE-2021-39925

Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score
SaveExploits0References8
NVD
NVD
•added 2021/11/19 5:15 p.m.•22 views

CVE-2021-39925

Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file...

7.5CVSS0.08139EPSS
SaveExploits1References8
OSV
OSV
•added 2021/11/19 5:15 p.m.•2 views

DEBIAN-CVE-2021-39925

Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.9AI score0.08139EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2021/11/19 5:15 p.m.•23 views

CVE-2021-39925

Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.9AI score0.08139EPSS
SaveExploits1References4
Prion
Prion
•added 2021/11/19 5:15 p.m.•29 views

Buffer overflow

Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file...

5CVSS7.5AI score0.08139EPSS
SaveExploits1References8Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/19 12:00 a.m.•3 views

CVE-2021-39925: Buffer Copy without Checking Size of Input

Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.3AI score0.08139EPSS
SaveExploits1References2
Rows per page
Query Builder