CVE-2016-9800: Buffer Overflow
In BlueZ 5.42, a buffer overflow was observed in "pincodereplydump" function in "tools/parser/hci.c" source file. The issue exists because "pin" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "pincodereplycp cp" parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9800?
CVE-2016-9800 is considered to have a moderate severity due to the potential for a buffer overflow that can lead to code execution.
How do I fix CVE-2016-9800?
To mitigate CVE-2016-9800, upgrade to a patched version of BlueZ that addresses the buffer overflow in the pin_code_reply_dump function.
What versions of BlueZ are affected by CVE-2016-9800?
CVE-2016-9800 affects BlueZ version 5.42.
What type of vulnerability is CVE-2016-9800?
CVE-2016-9800 is a buffer overflow vulnerability caused by insufficient boundary checks.
Can CVE-2016-9800 be exploited remotely?
CVE-2016-9800 could potentially be exploited remotely if an attacker can send specially crafted Bluetooth requests.