Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-822r-m33h-gr5v

Опубликовано: 26 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.7

Описание

BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd.

BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd.

EPSS

Процентиль: 15%
0.00237
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-843

Связанные уязвимости

CVSS3: 5.7
ubuntu
22 дня назад

BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd.

CVSS3: 5.7
redhat
23 дня назад

BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd.

CVSS3: 5.7
nvd
22 дня назад

BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd.

CVSS3: 5.7
debian
22 дня назад

BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can ...

EPSS

Процентиль: 15%
0.00237
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-843