CVE List

Id CVE No. Status Description Phase Votes Comments Actions
96621  CVE-2016-9801  Candidate  In BlueZ 5.42, a buffer overflow was observed in "set_ext_ctrl" function in "tools/parser/l2cap.c" source file when processing corrupted dump file.  Assigned (20161203)  None (candidate not yet proposed)    View
96622  CVE-2016-9802  Candidate  In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.  Assigned (20161203)  None (candidate not yet proposed)    View
96623  CVE-2016-9803  Candidate  In BlueZ 5.42, an out-of-bounds read was observed in "le_meta_ev_dump" function in "tools/parser/hci.c" source file. This issue exists because "subevent" (which is used to read correct element from "ev_le_meta_str" array) is overflowed.  Assigned (20161203)  None (candidate not yet proposed)    View
96624  CVE-2016-9804  Candidate  In BlueZ 5.42, a buffer overflow was observed in "commands_dump" function in "tools/parser/csr.c" source file. The issue exists because "commands" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "frm->ptr" parameter. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.  Assigned (20161203)  None (candidate not yet proposed)    View
96625  CVE-2016-9805  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20161203)  None (candidate not yet proposed)    View

Page 19325 of 20943, showing 5 records out of 104715 total, starting on record 96621, ending on 96625

Actions