Every CVE Search/ Get API key

CVE-2016-9802

In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c"...

5.3 MediumFix available

In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

3.62%Up 2.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.3

In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.

Record
CVE-2016-9802
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.

Record
CVE-2016-9802
Updated
2026-11-02
EUVDEUVD-2016-10603 No score

In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.

Record
EUVD-2016-10603
Updated
2026-11-03
GitHub AdvisoriesGHSA-6mj7-55x2-g5xx 5.3

In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c"...

In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.

Record
GHSA-6mj7-55x2-g5xx
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-119
Updated
2026-11-02
OSV 5.3

In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.

Record
CVE-2016-9802
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVDEBIAN-CVE-2016-9802 5.3

In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.

Record
DEBIAN-CVE-2016-9802
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2016-9802 5.3

In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.

Record
UBUNTU-CVE-2016-9802
CVSS 3.0
5.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVopenSUSE-SU-2019:1476-1 No score

Security update for bluez

This update for bluez fixes the following issues:

Security issues fixed:

  • CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708).
  • CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).
  • CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1476-1
Updated
2026-11-02
OSVSUSE-SU-2019:1339-1 No score

Security update for bluez

This update for bluez fixes the following issues:

Security vulnerability addressed:

  • CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708).
  • CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).
  • CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171).
  • CVE-2016-9802: Fixed a buffer over-read in l2cap_packet() (bsc#1013893).
  • CVE-2016-9918: Fixed an out-of-bounds stack read in packet_hexdump(), which could be triggered by processing a corrupted dump file and will result in a crash of the hcidump tool (bsc#1015173)
Record
SUSE-SU-2019:1339-1
Updated
2026-11-02
OSVSUSE-SU-2019:1353-1 No score

Security update for bluez

This update for bluez fixes the following issues:

Security issues fixed:

  • CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708).
  • CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).
  • CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171).
Record
SUSE-SU-2019:1353-1
Updated
2026-11-02
OSVSUSE-SU-2019:1353-2 No score

Security update for bluez

This update for bluez fixes the following issues:

Security issues fixed:

  • CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708).
  • CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).
  • CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171).
  • CVE-2016-9802: Fixed a buffer over-read in l2cap_packet() (bsc#1013893).
Record
SUSE-SU-2019:1353-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bluez
Debian:12
 All versions, plus listed versions
5.66-15.66-1+deb12u15.66-1+deb12u25.68-15.68-2
Show 22 moreShow less
5.69-15.70-15.70-1.15.70-1.1~exp05.71-15.73-15.73-1.15.77-15.79-15.79-25.82-15.82-1.15.83-15.83-1~exp15.84-15.85-15.85-25.85-35.85-45.87-15.87-25.87-3
 None known
bluez
Debian:13
 All versions, plus listed versions
5.82-1.15.83-15.83-1~exp15.84-15.85-1
Show 6 moreShow less
5.85-25.85-35.85-45.87-15.87-25.87-3
 None known
bluez
Debian:14
 All versions, plus listed versions
5.82-1.15.83-15.83-1~exp15.84-15.85-1
Show 6 moreShow less
5.85-25.85-35.85-45.87-15.87-25.87-3
 None known
bluez
SUSE:Linux Enterprise Desktop 12 SP3
 before 5.13-5.12.1
5.13-5.12.1
bluez
SUSE:Linux Enterprise Desktop 12 SP4
 before 5.13-5.12.1
5.13-5.12.1
bluez
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 5.13-5.12.1
5.13-5.12.1
bluez
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 5.13-5.12.1
5.13-5.12.1
bluez
SUSE:Linux Enterprise Server 12 SP3
 before 5.13-5.12.1
5.13-5.12.1
bluez
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 5.13-5.12.1
5.13-5.12.1
bluez
SUSE:Linux Enterprise Server 12 SP4
 before 5.13-5.12.1
5.13-5.12.1
Show 19 moreShow less
Affected packages
PackageAffectedFixed
bluez
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 5.13-5.12.1
5.13-5.12.1
bluez
SUSE:Linux Enterprise Workstation Extension 12 SP3
 before 5.13-5.12.1
5.13-5.12.1
bluez
SUSE:Linux Enterprise Workstation Extension 12 SP4
 before 5.13-5.12.1
5.13-5.12.1
bluez
SUSE:Linux Enterprise Module for Basesystem 15
 before 5.48-5.16.1
5.48-5.16.1
bluez
SUSE:Linux Enterprise Module for Desktop Applications 15
 before 5.48-5.16.1
5.48-5.16.1
bluez
SUSE:Linux Enterprise Workstation Extension 15
 before 5.48-5.16.1
5.48-5.16.1
bluez
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 5.48-5.16.1
5.48-5.16.1
bluez
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
 before 5.48-5.16.1
5.48-5.16.1
bluez
SUSE:Linux Enterprise Workstation Extension 15 SP1
 before 5.48-5.16.1
5.48-5.16.1
bluez
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
5.35-0ubuntu25.36-0ubuntu15.37-0ubuntu55.37-0ubuntu5.15.37-0ubuntu5.3
Show 6 moreShow less
5.37-0ubuntu5.3+esm15.37-0ubuntu5.3+esm25.37-0ubuntu5.3+esm35.37-0ubuntu5.3+esm45.37-0ubuntu5.3+esm55.37-0ubuntu5.3+esm6
 None known
bluez
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.46-0ubuntu35.46-0ubuntu45.48-0ubuntu35.48-0ubuntu3.15.48-0ubuntu3.2
Show 10 moreShow less
5.48-0ubuntu3.35.48-0ubuntu3.45.48-0ubuntu3.55.48-0ubuntu3.65.48-0ubuntu3.75.48-0ubuntu3.85.48-0ubuntu3.95.48-0ubuntu3.9+esm15.48-0ubuntu3.9+esm25.48-0ubuntu3.9+esm3
 None known
bluez
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.50-0ubuntu45.51-0ubuntu15.51-0ubuntu25.52-0ubuntu15.52-0ubuntu2
Show 14 moreShow less
5.53-0ubuntu15.53-0ubuntu25.53-0ubuntu35.53-0ubuntu3.15.53-0ubuntu3.25.53-0ubuntu3.35.53-0ubuntu3.45.53-0ubuntu3.55.53-0ubuntu3.65.53-0ubuntu3.75.53-0ubuntu3.85.53-0ubuntu3.95.53-0ubuntu3.9+esm15.53-0ubuntu3.9+esm2
 None known
bluez
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.60-0ubuntu25.62-0ubuntu15.62-0ubuntu25.63-0ubuntu15.63-0ubuntu2
Show 6 moreShow less
5.64-0ubuntu15.64-0ubuntu1.15.64-0ubuntu1.35.64-0ubuntu1.45.64-0ubuntu1.55.64-0ubuntu1.6
 None known
bluez
Ubuntu:24.04:LTS
 All versions, plus listed versions
5.68-0ubuntu15.70-0ubuntu15.70-0ubuntu25.70-0ubuntu35.71-0ubuntu3
Show 13 moreShow less
5.71-1ubuntu25.71-1ubuntu35.72-0ubuntu15.72-0ubuntu35.72-0ubuntu45.72-0ubuntu55.72-0ubuntu5.15.72-0ubuntu5.35.72-0ubuntu5.45.72-0ubuntu5.55.72-0ubuntu5.65.72-0ubuntu5.75.72-0ubuntu5.8
 None known
bluez
Ubuntu:25.10
 All versions, plus listed versions
5.79-2ubuntu15.82-15.82-1ubuntu15.83-1~exp15.83-1~exp1ubuntu0.1
 None known
bluez
Ubuntu:26.10
 All versions, plus listed versions
5.85-45.85-4ubuntu15.87-15.87-25.87-35.87-4
 None known
bluez
Ubuntu:26.04:LTS
 All versions, plus listed versions
5.83-1~exp15.84-15.85-15.85-25.85-3
Show 5 moreShow less
5.85-45.85-4ubuntu0.15.85-4ubuntu0.25.85-4ubuntu0.35.85-4ubuntu0.4
 None known
bluez
openSUSE:Leap 15.0
 before 5.48-lp151.8.3.1
5.48-lp151.8.3.1
bluez
openSUSE:Leap 15.1
 before 5.48-lp151.8.3.1
5.48-lp151.8.3.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-9802 is a medium vulnerability (CVSS 5.3) in Bluez, published December 3, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.62%, the 89th percentile. Fixed in bluez 5.13-5.12.1.

References

Show 16 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open