CVE-2016-9799: Buffer Overflow
In BlueZ 5.42, a buffer overflow was observed in "pklgreadhci" function in "btsnoop.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9799?
CVE-2016-9799 has been classified as a high severity vulnerability due to the potential for a buffer overflow leading to crashes.
How do I fix CVE-2016-9799?
To mitigate CVE-2016-9799, it is recommended to upgrade to a version of BlueZ higher than 5.42 where the vulnerability has been addressed.
What causes CVE-2016-9799?
CVE-2016-9799 is caused by a buffer overflow in the 'pklg_read_hci' function when processing a corrupted dump file.
Which versions of BlueZ are affected by CVE-2016-9799?
BlueZ version 5.42 is the only version affected by CVE-2016-9799.
What are the consequences of exploiting CVE-2016-9799?
Exploiting CVE-2016-9799 can lead to the crash of the btmon tool when it processes a maliciously crafted dump file.