CVE-2008-2374
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 4.3%
src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field that triggers excessive memory allocation or a buffer over-read.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
n/a · n/aReferências
http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.htmlhttp://secunia.com/advisories/30957http://secunia.com/advisories/31057http://secunia.com/advisories/31833http://secunia.com/advisories/32099http://secunia.com/advisories/32279http://secunia.com/advisories/34280http://security.gentoo.org/glsa/glsa-200903-29.xmlhttp://sourceforge.net/mailarchive/message.php?msg_name=b32d44000806161327u680c290au54fd21f2fef1d58e%40mail.gmail.comhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9973https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00396.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-September/msg00233.html