CVE-2019-8922 Memory corruption in n/a
A heap-based buffer overflow in BlueZ allows attackers to execute arbitrary code or cause denial of service via crafted Bluetooth requests.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-8922?
CVE-2019-8922 is a high-severity memory corruption vulnerability in Debian Debian Linux, published on 29 Nov 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the destination buffer. The function simply appends all data passed to it. The values of all attributes that are requested are appended to the output buffer. There are no size checks whatsoever, resulting in a simple heap overflow if one can craft a request where the response is large enough to overflow the preallocated buffer. This issue exists in service_attr_req gets called by process_request (in sdpd-request.c), which also allocates the response buffer.
Weakness: CWE-787
Which versions are affected by CVE-2019-8922?
It affects 2 products.
Linux distribution packages (20)
bluez SUSE:Enterprise Storage 6 | All versions | 5.48-150000.5.34.1 |
bluez SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS | All versions | 5.48-150000.5.34.1 |
bluez SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | All versions | 5.48-150000.5.34.1 |
bluez SUSE:Linux Enterprise High Performance Computing 15-ESPOS | All versions | 5.48-150000.5.34.1 |
bluez SUSE:Linux Enterprise High Performance Computing 15-LTSS | All versions | 5.48-150000.5.34.1 |
bluez SUSE:Linux Enterprise Server 12 SP2-BCL | All versions | 5.13-5.26.1 |
bluez SUSE:Linux Enterprise Server 12 SP3-BCL | All versions | 5.13-5.26.1 |
bluez SUSE:Linux Enterprise Server 12 SP4-LTSS | All versions | 5.13-5.26.1 |
bluez SUSE:Linux Enterprise Server 12 SP5 | All versions | 5.13-5.26.1 |
bluez SUSE:Linux Enterprise Server 15 SP1-BCL | All versions | 5.48-150000.5.34.1 |
bluez SUSE:Linux Enterprise Server 15 SP1-LTSS | All versions | 5.48-150000.5.34.1 |
bluez SUSE:Linux Enterprise Server 15-LTSS | All versions | 5.48-150000.5.34.1 |
bluez SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 5.13-5.26.1 |
bluez SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 5.13-5.26.1 |
bluez SUSE:Linux Enterprise Server for SAP Applications 15 | All versions | 5.48-150000.5.34.1 |
bluez SUSE:Linux Enterprise Server for SAP Applications 15 SP1 | All versions | 5.48-150000.5.34.1 |
bluez SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 5.13-5.26.1 |
bluez SUSE:Linux Enterprise Workstation Extension 12 SP5 | All versions | 5.13-5.26.1 |
bluez SUSE:OpenStack Cloud 9 | All versions | 5.13-5.26.1 |
bluez SUSE:OpenStack Cloud Crowbar 9 | All versions | 5.13-5.26.1 |
Products include Bluez Bluez, Debian Debian Linux.
How do I fix CVE-2019-8922?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-8922 being exploited?
There is no known exploitation of CVE-2019-8922 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2019-8922, GHSA-r763-g6p5-r323, SUSE-SU-2022:2864-1, SUSE-SU-2022:2900-1, UBUNTU-CVE-2019-8922, USN-5183-1.