{"id":"CVE-2006-0670","aliases":["DEBIAN-CVE-2006-0670","DSA-990-1","EUVD-2006-0677","GHSA-fm8c-whcx-jx6x"],"status":"published","title":"Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service ...","description":"Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03535,"percentile":0.89346,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2006-02-13T22:00:00Z","modified":"2026-06-16T22:21:03Z","fixes":[{"ecosystem":"Debian:3.1","package":"bluez-hcidump","fixed_in":["1.17-1sarge1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:3.1","package":"bluez-hcidump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-1sarge1"}]}],"versions":["1.17-1"]}],"products":[{"vendor":"bluez_project","product":"hcidump"}],"references":[{"url":"http://marc.info/?l=full-disclosure\u0026m=113924625825488\u0026w=2","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:041","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://www.osvdb.org/23056","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://secunia.com/advisories/18971","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2006/0479","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.debian.org/security/2006/dsa-990","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://secunia.com/advisories/18741","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/424133/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.ubuntu.com/usn/usn-256-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24533","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://securityreason.com/securityalert/465","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://www.secuobs.com/news/05022006-bluetooth9.shtml#english","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://secunia.com/advisories/19122","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0670"},{"url":"https://github.com/advisories/GHSA-fm8c-whcx-jx6x"}],"sources":{"cve":[{"id":"CVE-2006-0670","description":"Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.","status":"published","published":"2006-02-13T22:00:00Z","modified":"2024-08-07T16:41:28.964Z","updated_at":"2026-11-02T14:33:52.947472Z"}],"euvd":[{"id":"EUVD-2006-0677","description":"Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.","status":"published","published":"2006-02-13T22:00:00Z","modified":"2024-08-07T16:41:28Z","updated_at":"2026-11-03T01:16:08.538379Z"}],"ghsa":[{"id":"GHSA-fm8c-whcx-jx6x","title":"Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service ...","description":"Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.","status":"published","published":"2022-05-01T06:41:41Z","modified":"2023-01-31T05:00:39Z","updated_at":"2026-11-02T14:47:54.245378Z"}],"nvd":[{"id":"CVE-2006-0670","description":"Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.","status":"published","published":"2006-02-13T22:02:00Z","modified":"2026-06-16T22:21:03.06Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:00.920802Z"}],"osv":[{"id":"DSA-990-1","title":"bluez-hcidump - programming error","status":"published","published":"2006-03-10T00:00:00Z","modified":"2026-03-09T02:11:44.32935Z","updated_at":"2026-11-02T15:46:18.716547Z"}]}}