CVE-2021-41229 Memory leak in BlueZ
An attacker can cause a memory leak and crash the Bluetooth service by continuously sending SDP packets to a Linux device using BlueZ.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-41229?
CVE-2021-41229 is a medium-severity denial of service vulnerability in Debian Debian Linux, published on 12 Nov 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.
Which versions are affected by CVE-2021-41229?
It affects 2 products.
Linux distribution packages (40)
bluez AlmaLinux:8 | All versions | 5.56-3.el8 |
bluez-cups AlmaLinux:8 | All versions | 5.56-3.el8 |
bluez-hid2hci AlmaLinux:8 | All versions | 5.56-3.el8 |
bluez-libs AlmaLinux:8 | All versions | 5.56-3.el8 |
bluez-libs-devel AlmaLinux:8 | All versions | 5.56-3.el8 |
bluez-obexd AlmaLinux:8 | All versions | 5.56-3.el8 |
bluez-cups Red Hat:enterprise_linux:8::appstream | All versions | 0:5.56-3.el8 |
bluez-cups-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:5.56-3.el8 |
bluez-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:5.56-3.el8 |
bluez-debugsource Red Hat:enterprise_linux:8::appstream | All versions | 0:5.56-3.el8 |
bluez-hid2hci-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:5.56-3.el8 |
bluez-libs-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:5.56-3.el8 |
bluez-obexd-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:5.56-3.el8 |
bluez Red Hat:enterprise_linux:8::baseos | All versions | 0:5.56-3.el8 |
bluez-cups-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:5.56-3.el8 |
bluez-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:5.56-3.el8 |
bluez-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 0:5.56-3.el8 |
bluez-hid2hci Red Hat:enterprise_linux:8::baseos | All versions | 0:5.56-3.el8 |
bluez-hid2hci-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:5.56-3.el8 |
bluez-libs Red Hat:enterprise_linux:8::baseos | All versions | 0:5.56-3.el8 |
bluez-libs-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:5.56-3.el8 |
bluez-obexd Red Hat:enterprise_linux:8::baseos | All versions | 0:5.56-3.el8 |
bluez-obexd-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:5.56-3.el8 |
bluez-cups-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:5.56-3.el8 |
bluez-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:5.56-3.el8 |
bluez-debugsource Red Hat:enterprise_linux:8::crb | All versions | 0:5.56-3.el8 |
bluez-hid2hci-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:5.56-3.el8 |
bluez-libs-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:5.56-3.el8 |
bluez-libs-devel Red Hat:enterprise_linux:8::crb | All versions | 0:5.56-3.el8 |
bluez-obexd-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:5.56-3.el8 |
bluez Rocky Linux:8 | All versions | 0:5.56-3.el8 |
bluez SUSE:Linux Enterprise Micro 5.3 | All versions | 5.62-150400.4.16.1 |
bluez SUSE:Linux Enterprise Micro 5.4 | All versions | 5.62-150400.4.16.1 |
bluez SUSE:Linux Enterprise Module for Basesystem 15 SP4 | All versions | 5.62-150400.4.16.1 |
bluez SUSE:Linux Enterprise Module for Desktop Applications 15 SP4 | All versions | 5.62-150400.4.16.1 |
bluez SUSE:Linux Enterprise Server 12 SP5 | All versions | 5.13-5.42.2 |
bluez SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 5.13-5.42.2 |
bluez SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 5.13-5.42.2 |
bluez SUSE:Linux Enterprise Workstation Extension 12 SP5 | All versions | 5.13-5.42.2 |
bluez SUSE:Linux Enterprise Workstation Extension 15 SP4 | All versions | 5.62-150400.4.16.1 |
Products include Bluez Bluez, Debian Debian Linux.
How do I fix CVE-2021-41229?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-41229 being exploited?
There is no known exploitation of CVE-2021-41229 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALSA-2022:2081, DEBIAN-CVE-2021-41229, GHSA-3fqg-r8j5-f5xq, OESA-2022-1763, RHSA-2022:2081, RLSA-2022:2081 and 4 more.