CNVD-2021-44978 | Vulnetix

CNVD-2021-44978 PUBLISHED

Record from circl · Published June 10, 2021

BlueZ是一款使用C语言编写的蓝牙协议堆栈，它主要用于提供对核心蓝牙层和协议的支持。 BlueZ存在缓冲区溢出漏洞，该漏洞源于src/gatt-database.c中的 cli_feat_read_cb() 函数在将 “offset” 变量用作读取数组的索引之前未对其执行边界检查。目前没有详细漏洞细节提供。

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CNVD-2021-44978
vulnetix vdb fixes CNVD-2021-44978

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CNVD-2021-44978/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →