NVD

Id
2293  
Name
CVE-2008-2374  
Description
src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field that triggers excessive memory allocation or a buffer over-read.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-07-07  
Modified Date
2012-11-26  
Seq
2008-2374  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
14746 2293 CVE-2008-2374 SUSE-SR:2008:019  View
14747 2293 CVE-2008-2374 oval:org.mitre.oval:def:9973  View
14748 2293 CVE-2008-2374 GLSA-200903-29  View
14749 2293 CVE-2008-2374 [bluez-devel] 20080616 SDP payload processing vulnerability  View
14750 2293 CVE-2008-2374 http://www.bluez.org/bluez-334/  View
14751 2293 CVE-2008-2374 MDVSA-2008:145  View
14752 2293 CVE-2008-2374 RHSA-2008:0581  View
14753 2293 CVE-2008-2374 30105  View
14754 2293 CVE-2008-2374 1020479  View
14755 2293 CVE-2008-2374 ADV-2008-2096  View
14756 2293 CVE-2008-2374 FEDORA-2008-6140  View
14757 2293 CVE-2008-2374 FEDORA-2008-6133  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46227 JVNDB-2008-001537 BlueZ の bluez-libs におけるサービス運用妨害 (DoS) の脆弱性 BlueZ の bluez-libs の src/sdp.c には、SDP パケット内の文字列長フィールドの検証に不備があるため、遠隔の SDP サービスによるサービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2008-2374 32487 CVE-2008-2374 2293 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001537.html 2008-07-08 2008-08-06 View