Lucene search
Ubuntu.comUB:CVE-2008-2374HistoryJul 07, 2008 - 12:00 a.m.
CVE-2008-2374
2008-07-0700:00:00
ubuntu.com
ubuntu.com
20
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.009
Percentile
82.5%
src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and
bluez-utils before 3.34 versions, does not validate string length fields in
SDP packets, which allows remote SDP servers to cause a denial of service
or possibly have unspecified other impact via a crafted length field that
triggers excessive memory allocation or a buffer over-read.
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | bluez-utils and bluez-libs only |
Related
openvas
openvas
Gentoo Security Advisory GLSA 200903-29 (bluez-utils bluez-libs)
2009-03-20 00:00:00
Mandriva Update for bluez MDVSA-2008:145 (bluez)
2009-04-09 00:00:00
Fedora Update for bluez-utils FEDORA-2008-6133
2009-02-17 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: bluez-utils-3.35-3.fc8
2008-10-16 02:10:09
[SECURITY] Fedora 9 Update: bluez-libs-3.35-1.fc9
2008-09-10 06:51:58
[SECURITY] Fedora 8 Update: bluez-libs-3.35-1.fc8
2008-10-16 02:10:09
nessus
nessus
SuSE 10 Security Update : Bluetooth utilities (ZYPP Patch Number 5437)
2008-09-24 00:00:00
openSUSE Security Update : bluez-audio (bluez-audio-100)
2009-07-21 00:00:00
Oracle Linux 4 / 5 : bluez-libs / bluez-utils (ELSA-2008-0581)
2013-07-12 00:00:00
oraclelinux
oraclelinux
bluez-libs and bluez-utils security update
2008-07-14 00:00:00
cvelist
cvelist
CVE-2008-2374
2008-07-07 23:00:00
osv
osv
obex-data-server-0.4.6-15.8 on GA media
2024-06-15 00:00:00
securityvulns
securityvulns
[ MDVSA-2008:145 ] - Updated bluez/bluez-utils packages fix SDP packet parsing vulnerability
2008-07-18 00:00:00
bluez bluetooth stack memory corruption
2008-07-18 00:00:00
gentoo
gentoo
BlueZ: Arbitrary code execution
2009-03-16 00:00:00
seebug
seebug
BlueZ SDPθ΄θ½½ε€ηε€δΈͺηΌε²εΊζΊ’εΊζΌζ΄
2008-07-09 00:00:00
redhat
redhat
(RHSA-2008:0581) Moderate: bluez-libs and bluez-utils security update
2008-07-14 00:00:00
nvd
nvd
CVE-2008-2374
2008-07-07 23:41:00
cve
cve
CVE-2008-2374
2008-07-07 23:41:00
prion
prion
Memory corruption
2008-07-07 23:41:00
centos
centos
bluez security update
2008-07-14 16:47:36
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.009
Percentile
82.5%
Related for UB:CVE-2008-2374