CVE-2016-9802

In BlueZ 5.42, a buffer over-read was identified in "l2cappacket" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

DEBIAN-CVE-2016-9798

In BlueZ 5.42, a use-after-free was identified in "confopt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

UBUNTU-CVE-2016-9801

In BlueZ 5.42, a buffer overflow was observed in "setextctrl" function in "tools/parser/l2cap.c" source file when processing corrupted dump file...

UBUNTU-CVE-2016-9802

In BlueZ 5.42, a buffer over-read was identified in "l2cappacket" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...

UBUNTU-CVE-2016-9798

In BlueZ 5.42, a use-after-free was identified in "confopt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

UBUNTU-CVE-2016-9797

In BlueZ 5.42, a buffer over-read was observed in "l2capdump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...

PT-2016-7830

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description A buffer over-read issue was identified in the l2cap packet function in the monitor/packet.c source file. This issue can be triggered by processing a corrupted dump file, resulting in a btmon crash. Recommendatio...

PT-2016-7825

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42 Description A buffer over-read issue was found in the l2cap dump function in the tools/parser/l2cap.c source file. This issue can be triggered by processing a corrupted dump file, resulting in an hcidump crash. Recommendatio...

PT-2017-9433

Name of the Vulnerable Software and Affected Versions Wireshark version 2.2.0 ALT Linux affected versions not specified Description The issue is related to a crash in the Bluetooth L2CAP dissector, which can be triggered by packet injection or a malformed capture file. This occurs due to the use ...

PT-2017-14249 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.19 Description: The issue is related to the bnep add connection function in the Linux kernel, which does not properly check for the availability of an l2cap socket. This allows local users to potentially gain...

Oracle Linux 6 : kernel (ELSA-2013-1173)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1173 advisory. - x86 perf/x86: Fix offcorersp valid mask for SNB/IVB Nikola Pajkovsky 971314 971315 CVE-2013-2146 - bluetooth L2CAP - Fix info leak via getsockname...

Oracle Linux 5 : kernel (ELSA-2011-0927)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0927 advisory. - Revert: xen hvm: svm support cleanups Andrew Jones 703715 702657 CVE-2011-1780 - Revert: xen hvm: secure svmcraccess Andrew Jones 703715 702657...

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1808-1)

Mathias Krause discovered an information leak in the Linux kernel's getsockname implementation for Logical Link Layer llc sockets. A local user could exploit this flaw to examine some of the kernel's stack memory. CVE-2012-6542 Mathias Krause discovered information leaks in the Linux kernel's...

Ubuntu 10.04 LTS : linux vulnerabilities (USN-1805-1)

Mathias Krause discovered an information leak in the Linux kernel's getsockname implementation for Logical Link Layer llc sockets. A local user could exploit this flaw to examine some of the kernel's stack memory. CVE-2012-6542 Mathias Krause discovered information leaks in the Linux kernel's...

DEBIAN-CVE-2012-6544

The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the 1 L2CAP or 2 HCI implementation...

CVE-2012-6544

The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the 1 L2CAP or 2 HCI implementation...

CVE-2012-6544

The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the 1 L2CAP or 2 HCI implementation...

CVE-2012-6544: Exposure of Sensitive Information to an Unauthorized Actor

The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the 1 L2CAP or 2 HCI implementation...

PT-2013-1017

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6 Description The Bluetooth protocol stack in the Linux kernel does not properly initialize certain structures, allowing local users to obtain sensitive information from kernel stack memory via a crafted...

USN-1652-1: Linux kernel (Oneiric backport) vulnerabilities

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...