BlueZ buffer overflow vulnerability (CNVD-2016-11950)

BlueZ is an official Bluetooth stack for Linux. A buffer overflow vulnerability exists in the 'pincodereplydump' function in the tools/parser/hci.c source file of BlueZ version 5.42, which stems from the program's failure to perform sufficient bounds checking on parameters. An attacker could...