CVE-2006-0670

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2006-02-13

Last modified

2024-08-07

Affected products

• Hcidump (Bluez Project)

References

• http://marc.info/?l=full-disclosure&m=113924625825488&w=2
• http://secunia.com/advisories/18741
• http://secunia.com/advisories/18971
• http://secunia.com/advisories/19122
• http://securityreason.com/securityalert/465
• http://www.debian.org/security/2006/dsa-990
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:041
• http://www.osvdb.org/23056
• http://www.secuobs.com/news/05022006-bluetooth9.shtml#english
• http://www.securityfocus.com/archive/1/424133/100/0/threaded
• http://www.ubuntu.com/usn/usn-256-1
• http://www.vupen.com/english/advisories/2006/0479
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24533