CVE-2016-9798 - In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c" sour

CVE-2016-9798

Summary

In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.

References

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00071.html
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00072.html
http://www.securityfocus.com/bid/94652
https://www.spinics.net/lists/linux-bluetooth/msg68892.html

Vulnerable Configurations

cpe:2.3:a:bluez:bluez:5.42:*:*:*:*:*:*:*
cpe:2.3:a:bluez:bluez:5.42:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 30-05-2019 - 14:29)
Impact:
Exploitability:

CWE

CWE-416

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

refmap via4

bid	94652
misc	https://www.spinics.net/lists/linux-bluetooth/msg68892.html
suse	openSUSE-SU-2019:1476 openSUSE-SU-2019:2585 openSUSE-SU-2019:2588

Last major update

30-05-2019 - 14:29

Published

03-12-2016 - 06:59

Last modified

30-05-2019 - 14:29