CVE-2008-2374 src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to....
HighCVSS 7.5
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field that triggers excessive memory allocation or a buffer over-read.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bluez-libs | < 3.34 | 3.34 |
| bluez-utils | < 3.34 | 3.34 |
| fedoraproject fedora | = 8 | No fix listed |
| fedoraproject fedora | = 9 | No fix listed |
References
- SUSE-SR:2008:019 third-party-advisory vendor-advisory
- 30957 broken-link third-party-advisory vendor-advisory
- 31057 broken-link third-party-advisory
- 31833 broken-link third-party-advisory
- 32099 broken-link third-party-advisory
- 32279 broken-link third-party-advisory
- 34280 broken-link third-party-advisory
- GLSA-200903-29 third-party-advisory vendor-advisory
- [bluez-devel] 20080616 SDP payload processing vulnerability broken-link exploit mailing-list
- www.bluez.org product
- MDVSA-2008:145 broken-link vendor-advisory
- RHSA-2008:0581 broken-link vendor-advisory
- 30105 broken-link third-party-advisory vdb-entry
- 1020479 broken-link third-party-advisory vdb-entry
- ADV-2008-2096 broken-link vdb-entry
- oval:org.mitre.oval:def:9973 broken-link signature vdb-entry
- FEDORA-2008-6140 mailing-list vendor-advisory
- FEDORA-2008-6133 mailing-list vendor-advisory