BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdpcstatealloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "5.48-0ubuntu3.6", "binary_name": "bluetooth" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "bluez" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "bluez-cups" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "bluez-dbg" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "bluez-hcidump" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "bluez-obexd" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "bluez-tests" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "libbluetooth-dev" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "libbluetooth3" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "libbluetooth3-dbg" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "5.53-0ubuntu3.4", "binary_name": "bluetooth" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "bluez" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "bluez-cups" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "bluez-dbg" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "bluez-hcidump" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "bluez-obexd" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "bluez-tests" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "libbluetooth-dev" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "libbluetooth3" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "libbluetooth3-dbg" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "5.62-0ubuntu2", "binary_name": "bluetooth" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "bluez" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "bluez-cups" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "bluez-cups-dbgsym" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "bluez-dbgsym" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "bluez-hcidump" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "bluez-hcidump-dbgsym" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "bluez-meshd" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "bluez-meshd-dbgsym" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "bluez-obexd" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "bluez-obexd-dbgsym" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "bluez-tests" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "bluez-tests-dbgsym" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "libbluetooth-dev" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "libbluetooth3" }, { "binary_version": "5.62-0ubuntu2", "binary_name": "libbluetooth3-dbgsym" } ] }