https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:30:20 +0000 https://vulnerability.circl.lu/vuln/cve-2019-8922 <p>A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn&#39;t any check on whether there is enough space in the destination buffer. The function simply appends all data passed to it. The values of all attributes that are requested are appended to the output buffer. There are no size checks whatsoever, resulting in a simple heap overflow if one can craft a request where the response is large enough to overflow the preallocated buffer. This issue exists in service_attr_req gets called by process_request (in sdpd-request.c), which also allocates the response buffer.</p> <p>A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn&#39;t any check on whether there is enough space in the destination buffer. The function simply appends all data passed to it. The values of all attributes that are requested are appended to the output buffer. There are no size checks whatsoever, resulting in a simple heap overflow if one can craft a request where the response is large enough to overflow the preallocated buffer. This issue exists in service_attr_req gets called by process_request (in sdpd-request.c), which also allocates the response buffer.</p> https://vulnerability.circl.lu/vuln/cve-2019-8922 https://vulnerability.circl.lu/vuln/usn-5183-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: bluez</p> <p>Julian Rauchberger discovered that BlueZ incorrectly handled memory when processing SDP attribute requests. A remote attacker could use this issue to cause BlueZ to crash, leading to a denial of service, or possibly execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: bluez</p> <p>Julian Rauchberger discovered that BlueZ incorrectly handled memory when processing SDP attribute requests. A remote attacker could use this issue to cause BlueZ to crash, leading to a denial of service, or possibly execute arbitrary code.</p> https://vulnerability.circl.lu/vuln/usn-5183-1