CVE-2016-7837

Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.

Buffer overflow in parse_line function in the csr tool (CVE-2016-7837).

This update for bluez fixes the following issues:

Security issues fixed:

• CVE-2016-9800: Fix hcidump memory leak in pin_code_reply_dump() (bsc#1013721).
• CVE-2016-9804: Fix hcidump buffer overflow in commands_dump() (bsc#1013877).
• CVE-2016-7837: Fix possible buffer overflow, make sure we don't write past the end of the array (bsc#1026652).
• CVE-2017-1000250: Fix information disclosure vulnerability in service_search_attr_req (bsc#1057342).

This update for bluez fixes the following issues:

Security issues fixed:

• CVE-2016-7837: Fixed possible buffer overflow, make sure we don't write past the end of the array.(bsc#1026652)
• CVE-2016-9800: Fix hcidump memory leak in pin_code_reply_dump() (bsc#1013721).
• CVE-2016-9801: Fixed a buffer overflow in set_ext_ctrl function (bsc#1013732)
• CVE-2016-9804: Fix hcidump buffer overflow in commands_dump() (bsc#1013877).
• CVE-2016-9918: Fixed an out-of-bounds read in packet_hexdump() (bsc#1015173)
• CVE-2017-1000250: Fixed a information leak in SDP (part of the recently published BlueBorne vulnerabilities) (bsc#1057342)

It was discovered that BlueZ incorrectly handled bonding HID and HOGP devices. A local attacker could possibly use this issue to impersonate non-bonded devices. (CVE-2020-0556)

It was discovered that BlueZ incorrectly handled certain commands. A local attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-7837)