CVE-2016-9798 Use after free in n/a
A use-after-free in BlueZ hcidump allows attackers to cause a denial of service by processing a corrupted dump file.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-9798?
CVE-2016-9798 is a medium-severity use after free vulnerability in n/a, published on 3 Dec 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
Weakness: CWE-416
Which versions are affected by CVE-2016-9798?
It affects 1 product.
Linux distribution packages (17)
bluez SUSE:Linux Enterprise Desktop 12 SP4 | All versions | 5.13-5.15.3 |
bluez SUSE:Linux Enterprise Module for Basesystem 15 | All versions | 5.48-5.19.1 |
bluez SUSE:Linux Enterprise Module for Basesystem 15 SP1 | All versions | 5.48-5.19.1 |
bluez SUSE:Linux Enterprise Module for Desktop Applications 15 | All versions | 5.48-5.19.1 |
bluez SUSE:Linux Enterprise Module for Desktop Applications 15 SP1 | All versions | 5.48-5.19.1 |
bluez SUSE:Linux Enterprise Server 12 SP4 | All versions | 5.13-5.15.3 |
bluez SUSE:Linux Enterprise Server 12 SP5 | All versions | 5.13-5.15.3 |
bluez SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 5.13-5.15.3 |
bluez SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 5.13-5.15.3 |
bluez SUSE:Linux Enterprise Software Development Kit 12 SP4 | All versions | 5.13-5.15.3 |
bluez SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 5.13-5.15.3 |
bluez SUSE:Linux Enterprise Workstation Extension 12 SP4 | All versions | 5.13-5.15.3 |
bluez SUSE:Linux Enterprise Workstation Extension 12 SP5 | All versions | 5.13-5.15.3 |
bluez SUSE:Linux Enterprise Workstation Extension 15 | All versions | 5.48-5.19.1 |
bluez SUSE:Linux Enterprise Workstation Extension 15 SP1 | All versions | 5.48-5.19.1 |
bluez openSUSE:Leap 15.0 | All versions | 5.48-lp150.4.16.1 |
bluez openSUSE:Leap 15.1 | All versions | 5.48-lp151.8.6.1 |
Products include Bluez Bluez.
How do I fix CVE-2016-9798?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2016-9798 being exploited?
There is no known exploitation of CVE-2016-9798 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2016-9798, GHSA-777g-v2xh-6rvf, ROOT-OS-DEBIAN-12-CVE-2016-9798, SUSE-SU-2019:2915-1, SUSE-SU-2019:3046-1, UBUNTU-CVE-2016-9798 and 2 more.