CVE-2016-9800 (bluez)

CVE-2016-9800 (bluez)

In BlueZ 5.42, a buffer overflow was observed in "pin_code_reply_dump" function in "tools/parser/hci.c" source file. The issue exists because "pin" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "pin_code_reply_cp *cp" parameter.

Source: CVE-2016-9800 (bluez)

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다