vulnwire
9.8crit

CVE-2008-2374

src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string leng…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
4.3%
percentile 91%
Public exploits
0
none known

src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field that triggers excessive memory allocation or a buffer over-read.

CISA SSVC assessment

Exploitation
none
Automatable
yes
Technical impact
total
Assessed
21 mo ago

Exploit prediction (EPSS)

4.29% probability of exploitation in the next 30 days, higher than 91% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
CISA ADP3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-1284 Improper Validation of Specified Quantity in Input

References

  • secunia.com /advisories/31057 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/30105 · vdb-entry, x_refsource_BID, x_transferred
  • security.gentoo.org /glsa/glsa-200903-29.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • vupen.com /english/advisories/2008/2096/references · vdb-entry, x_refsource_VUPEN, x_transferred
  • mandriva.com /security/advisories?name=MDVSA-2008:145 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • secunia.com /advisories/34280 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /archives/fedora-package-announce/2008-October/msg00396.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • redhat.com /support/errata/RHSA-2008-0581.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • bluez.org /bluez-334/ · x_refsource_CONFIRM, x_transferred
  • redhat.com /archives/fedora-package-announce/2008-September/msg00233.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • sourceforge.net /mailarchive/message.php?msg_name=b32d44000806161327u680c290au54fd21f2fef1d58e%40mail.gmai · mailing-list, x_refsource_MLIST, x_transferred
  • secunia.com /advisories/30957 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/31833 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9973 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • securitytracker.com /id?1020479 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • secunia.com /advisories/32099 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2008-09/msg00005.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • secunia.com /advisories/32279 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.