First Last Prev Next    This bug is not in your last search results.
Bug 1013716 - (CVE-2016-9799) VUL-0: CVE-2016-9799: bluez: buffer overflow in pklg_read_hci()
(CVE-2016-9799)
VUL-0: CVE-2016-9799: bluez: buffer overflow in pklg_read_hci()
Status: RESOLVED INVALID
Classification: Novell Products
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents
unspecified
Other Other
: P5 - None : Minor
: ---
Assigned To: Al Cho
Security Team bot
https://smash.suse.de/issue/177092/
:
Depends on:
Blocks:
  Show dependency tree / graph
 
Reported: 2016-12-05 16:47 UTC by Matthias Gerstner
Modified: 2016-12-06 10:01 UTC (History)
2 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Gerstner 2016-12-05 16:47:24 UTC 
In BlueZ 5.42, a buffer overflow was observed in "pklg_read_hci" function in
"btsnoop.c" source file. This issue can be triggered by processing a corrupted
dump file and will result in btmon crash.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1401524
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9799
http://www.cvedetails.com/cve/CVE-2016-9799/
https://www.spinics.net/lists/linux-bluetooth/msg68898.html
Comment 1 Matthias Gerstner 2016-12-05 16:48:25 UTC 
The reported bug does not apply to older versions of bluez. None of our codestreams contains the affected function "pklg_read_hci".
First Last Prev Next    This bug is not in your last search results.