CVE-2021-41229: Memory leak in BlueZ
BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdpcstateallocbuf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-41229?
CVE-2021-41229 is a vulnerability in the BlueZ Bluetooth protocol stack for Linux that allows for a memory leak over time.
How does CVE-2021-41229 affect BlueZ?
CVE-2021-41229 affects BlueZ versions 5.58 and potentially creates a memory leak over time.
Which versions of Debian Linux are affected by CVE-2021-41229?
CVE-2021-41229 affects Debian Linux versions 9.0 and 10.0.
What is the severity of CVE-2021-41229?
The severity of CVE-2021-41229 is medium with a CVSS score of 6.5.
How can I fix CVE-2021-41229?
To fix CVE-2021-41229, update your BlueZ or Debian Linux to the latest patched version.