CVE-2008-2374

The bluez-libs and bluez-utils components in BlueZ (specifically bluez-libs versions before 3.34 and bluez-utils before 3.34 ) are vulnerable to a flaw in src/sdp.c . The software fails to validate string length fields in SDP packets , allowing remote SDP servers to trigger excessive memory alloc...