CVE-2016-7837

Опубликовано: 09 июн. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.

Ссылки

http://www.securityfocus.com/bid/95067
Third Party Advisory
VDB Entry
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=8514068150759c1d6a46d4605d2351babfde1601
Patch
Third Party Advisory
https://jvn.jp/en/jp/JVN38755305/index.html
Third Party Advisory
VDB Entry
https://usn.ubuntu.com/4311-1/
http://www.securityfocus.com/bid/95067
Third Party Advisory
VDB Entry
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=8514068150759c1d6a46d4605d2351babfde1601
Patch
Third Party Advisory
https://jvn.jp/en/jp/JVN38755305/index.html
Third Party Advisory
VDB Entry
https://usn.ubuntu.com/4311-1/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:bluez:bluez:*:*:*:*:*:*:*:*

Версия до 5.41 (включая)

EPSS

Процентиль: 44%

0.00556

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2016-7837

CVSS3: 7.8

ubuntu

около 9 лет назад

Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.

CVE-2016-7837

CVSS3: 2.2

redhat

почти 10 лет назад

Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.

CVE-2016-7837

CVSS3: 7.8

debian

около 9 лет назад

Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execut ...

GHSA-rqrx-f2rh-m32q

CVSS3: 7.8

github

больше 4 лет назад

Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.

openSUSE-SU-2017:2810-1

suse-cvrf

почти 9 лет назад

Security update for bluez

EPSS

Процентиль: 44%

0.00556

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-119