CVE-2016-9804 — Vulnetix

Try Vulnetix Request Demo

CVE-2016-9804 PUBLISHED

In BlueZ 5.42, a buffer overflow was observed in "commands_dump" function in "tools/parser/csr.c" source file. The issue exists because "commands" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "frm->ptr" parameter. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.

EPSS 0.36% · 57.9th percentile

Risk Scores

EPSS Score

0.36%

57.9th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:22.04:LTS	bluez	5.64-0ubuntu1.1, 5.64-0ubuntu1.3, 5.64-0ubuntu1.4
Ubuntu:Pro:18.04:LTS	bluez	5.48-0ubuntu3.9+esm2, 5.48-0ubuntu3.2, 5.48-0ubuntu3.3
Ubuntu:24.04:LTS	bluez	5.71-0ubuntu3, 5.72-0ubuntu5.5, 5.72-0ubuntu5.4
Ubuntu:20.04:LTS	bluez	5.53-0ubuntu3.4, 0, 5.50-0ubuntu4
Ubuntu:25.10	bluez	0, 5.79-2ubuntu1, 5.82-1
Ubuntu:Pro:16.04:LTS	bluez	5.37-0ubuntu5.3, 5.37-0ubuntu5.1, 0

Timeline

Dec 3, 2016 CVE Published
Feb 4, 2022 EPSS Score
Mar 28, 2022 EPSS Score
May 19, 2022 EPSS Score
Sep 1, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 14, 2022 EPSS Score
Feb 4, 2023 EPSS Score
Mar 7, 2023 EPSS Score
May 19, 2023 EPSS Score
Jul 10, 2023 EPSS Score
Aug 31, 2023 EPSS Score

References

https://ubuntu.com/security/CVE-2016-9804 third-party-advisory
https://www.spinics.net/lists/linux-bluetooth/msg68892.html third-party-advisory
https://www.cve.org/CVERecord?id=CVE-2016-9804 third-party-advisory

Open in Interactive Console →