CVE-2016-7837: Buffer Overflow
Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parseline function used in some userland utilities.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/bluezto a version that resolves this vulnerability.Fixed in 5.55-3.1+deb11u1Fixed in 5.55-3.1+deb11u2Fixed in 5.66-1+deb12u2Fixed in 5.66-1+deb12u1Fixed in 5.82-1.1Fixed in 5.84-1Fixed in 5.85-3
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2016-7837.
What is the severity rating of CVE-2016-7837?
The severity rating of CVE-2016-7837 is high with a score of 7.8.
What is the affected software?
The affected software is BlueZ versions 5.41 and earlier.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by executing arbitrary code via the parse_line function used in some BlueZ userland utilities.
How can I mitigate this vulnerability?
To mitigate this vulnerability, update BlueZ to version 4.101-0ubuntu13.3 (for Ubuntu 14.04 Trusty), version 5.43-1 (for Ubuntu upstream), version 5.37-0ubuntu5.3 (for Ubuntu 16.04 Xenial), or a later version.