In BlueZ 5.42, a buffer over-read was observed in "l2cap_dump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.

This update for bluez fixes the following issues :

Security issues fixed :

CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708).

CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).

CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171).

CVE-2016-9802: Fixed a buffer over-read in l2cap_packet() (bsc#1013893).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for bluez fixes the following issues :

Security issues fixed :

  - CVE-2016-9797: Fixed a buffer over-read in l2cap_dump()     (bsc#1013708).

  - CVE-2016-9798: Fixed a use-after-free in conf_opt()     (bsc#1013712).

  - CVE-2016-9917: Fixed a heap-based buffer overflow in     read_n() (bsc#1015171).

This update was imported from the SUSE:SLE-15:Update update project.

This update for bluez fixes the following issues :

Security issues fixed :

CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708).

CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).

CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for bluez fixes the following issues :

Security vulnerability addressed :

CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708).

CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).

CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171).

CVE-2016-9802: Fixed a buffer over-read in l2cap_packet() (bsc#1013893).

CVE-2016-9918: Fixed an out-of-bounds stack read in packet_hexdump(), which could be triggered by processing a corrupted dump file and will result in a crash of the hcidump tool (bsc#1015173)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
130087	SUSE SLED15 / SLES15 Security Update : bluez (SUSE-SU-2019:1353-2)	Nessus	SuSE Local Security Checks	high
125618	openSUSE Security Update : bluez (openSUSE-2019-1476)	Nessus	SuSE Local Security Checks	high
125467	SUSE SLED15 / SLES15 Security Update : bluez (SUSE-SU-2019:1353-1)	Nessus	SuSE Local Security Checks	high
125459	SUSE SLED12 / SLES12 Security Update : bluez (SUSE-SU-2019:1339-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2016-9797

medium

Tenable Plugins

high

high

high

high