hci-iweb.iwr.uni-heidelberg.de XSS vulnerability

Vulnerable URL: https://hci-iweb.iwr.uni-heidelberg.de/osTicket/file.php?key=lvfbpv4t6t8j9eswlvnxfgsa9uxkjirm=1501718400=a4c9921da16fc4cec2f12a027a0888aa90f39081 Details: Description| Value ---|--- Patched:| Yes, at 05.08.2017 Latest check for patch:| 05.08.2017 13:45 GMT Vulnerability type:| XSS...

PT-2017-2722

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue arises due to insufficient input validation, specifically in the length of an HCI command. This could potentially all...

BlueZ read-across-the-border vulnerability (CNVD-2016-11953)

BlueZ is an official Bluetooth stack for Linux. A security vulnerability exists in the 'lemetaevdump' function in the tools/parser/hci.c source file of BlueZ version 5.42. An attacker can exploit this vulnerability to read data across boundaries...

DEBIAN-CVE-2016-9803

In BlueZ 5.42, an out-of-bounds read was observed in "lemetaevdump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' which is used to read correct element from 'evlemetastr' array is overflowed...

CVE-2016-9803

In BlueZ 5.42, an out-of-bounds read was observed in "lemetaevdump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' which is used to read correct element from 'evlemetastr' array is overflowed...

PT-2016-7831

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description An out-of-bounds read issue was found in the le meta ev dump function, located in the tools/parser/hci.c source file. This occurs because the subevent variable, used to read the correct element from the ev le met...

PT-2016-7827

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description A buffer overflow issue was found in the pklg read hci function in the btsnoop.c source file. This issue can be triggered by processing a corrupted dump file, resulting in a btmon crash. Recommendations For BlueZ...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the Bluetooth HCI interface in the Mac OS X operating system is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure memory corruption...

Memory corruption

The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-7108

The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-7108

The CVE-2015-7108 entry affects the Bluetooth HCI interface in Apple OS X prior to 10.11.2, where a memory corruption vulnerability in the HCI path allows local users to gain privileges or cause a denial of service. Root cause is memory corruption via unspecified vectors in the Bluetooth HCI hand...

PT-2015-2927

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.2 Description The issue is related to a buffer overflow in the Bluetooth HCI interface of the Mac OS X operating system. This can be exploited by a local attacker to either gain elevated privileges or cause a...

CVE-2015-7108: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-3683

The Bluetooth HCI interface implementation in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Memory corruption

The Bluetooth HCI interface implementation in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2015-3683: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Bluetooth HCI interface implementation in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

PT-2015-6281

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.4 Description The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption via a crafted app. This is related to the Bluetooth HCI interfa...

openSUSE Security Update : wireshark (openSUSE-SU-2013:0276-1)

wireshark was updated to 1.8.5 to fix bugs and security issues. Vulnerabilities fixed : - Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01 CVE-2013-1572 CVE-2013-1573 CVE-2013-1574...

wireshark: Integer overflows in BACapp and Bluetooth HCI dissectors, leading to DoS (wnpa-sec-2012-08)

Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a denial of service infinite loop via vectors related to the 1 BACapp and 2 Bluetooth HCI dissectors, a different vulnerability than CVE-2012-2392...

Code injection

The Bluetooth HCI ACL dissector in Wireshark 1.10.x before 1.10.2 does not properly maintain a certain free list, which allows remote attackers to cause a denial of service application crash via a crafted packet that is not properly handled by the wmemblockalloc function in...