CVE-2016-9802 PUBLISHED

In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.

EPSS 0.48% · 64.7th percentile

Risk Scores

EPSS Score
0.48%
64.7th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSbluez5.51-0ubuntu1, 5.51-0ubuntu2, 5.52-0ubuntu1
Ubuntu:22.04:LTSbluez5.63-0ubuntu2, 5.64-0ubuntu1.4, 5.64-0ubuntu1.3
Ubuntu:25.10bluez0, 5.83-1~exp1ubuntu0.1, 5.83-1~exp1
Ubuntu:Pro:18.04:LTSbluez5.48-0ubuntu3.9+esm2, 5.48-0ubuntu3.9+esm1, 5.48-0ubuntu3.9
Ubuntu:24.04:LTSbluez5.72-0ubuntu5.1, 5.70-0ubuntu3, 5.71-0ubuntu3
Ubuntu:Pro:16.04:LTSbluez5.37-0ubuntu5.3+esm5, 5.37-0ubuntu5.3+esm4, 5.37-0ubuntu5.3+esm3

Timeline

References

Open in Interactive Console →