CVE-2016-9804: Buffer Overflow
In BlueZ 5.42, a buffer overflow was observed in "commandsdump" function in "tools/parser/csr.c" source file. The issue exists because "commands" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "frm->ptr" parameter. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9804?
CVE-2016-9804 has been classified as having a high severity due to the potential for exploitation leading to a buffer overflow.
How do I fix CVE-2016-9804?
To fix CVE-2016-9804, upgrade to a patched version of BlueZ later than 5.42 that addresses this buffer overflow vulnerability.
What systems are affected by CVE-2016-9804?
CVE-2016-9804 specifically affects BlueZ version 5.42.
What type of vulnerability is CVE-2016-9804?
CVE-2016-9804 is a buffer overflow vulnerability due to improper boundary checks.
Can CVE-2016-9804 be exploited remotely?
Yes, CVE-2016-9804 can be exploited remotely if an attacker sends specifically crafted input to vulnerable BlueZ software.