CVE-2008-2374

bluez-libs: SDP payload processing vulnerability

Severity Score

9.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field that triggers excessive memory allocation or a buffer over-read.

src/sdp.c de bluez-libs 3.30 en BlueZ, y otras bluez-libs anteriores a 3.34 y bluez-utils anteriores a 3.34, no validan la longitud de los campos de cadena en paquetes SDP, lo que permite a servidores SDP provocar una denegación de servicio y es posible que tenga otros efectos, a través de una longitud de campo manipulada que dispara la reserva excesiva de posicionamiento en memoria o sobre-lectua del buffer.

An input validation flaw was found in the Bluetooth Session Description Protocol (SDP) packet parser used in the Bluez bluetooth utilities. A bluetooth device with an already-trusted relationship, or a local user registering a service record via a UNIX socket or D-Bus interface, could cause a crash and potentially execute arbitrary code with the privileges of the hcid daemon. The updated packages have been patched to correct this issue.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

None

Automatable

Yes

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2008-05-21 CVE Reserved
2008-07-07 CVE Published
2025-01-17 CVE Updated
2025-01-17 First Exploit
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-1284: Improper Validation of Specified Quantity in Input

CAPEC

References (20)

URL	Tag	Source
http://secunia.com/advisories/31057	Broken Link
http://secunia.com/advisories/31833	Broken Link
http://secunia.com/advisories/32099	Broken Link
http://secunia.com/advisories/32279	Broken Link
http://secunia.com/advisories/34280	Broken Link
http://www.bluez.org/bluez-334	Product
http://www.securityfocus.com/bid/30105	Broken Link
http://www.securitytracker.com/id?1020479	Broken Link
http://www.vupen.com/english/advisories/2008/2096/references	Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9973	Broken Link

URL	Date	SRC
http://sourceforge.net/mailarchive/message.php?msg_name=b32d44000806161327u680c290au54fd21f2fef1d58e%40mail.gmail.com	2025-01-17

URL	Date	SRC

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html	2024-02-13
http://secunia.com/advisories/30957	2024-02-13
http://security.gentoo.org/glsa/glsa-200903-29.xml	2024-02-13
http://www.mandriva.com/security/advisories?name=MDVSA-2008:145	2024-02-13
http://www.redhat.com/support/errata/RHSA-2008-0581.html	2024-02-13
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00396.html	2024-02-13
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00233.html	2024-02-13
https://access.redhat.com/security/cve/CVE-2008-2374	2008-07-14
https://bugzilla.redhat.com/show_bug.cgi?id=452715	2008-07-14

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Bluez Search vendor "Bluez"		Bluez-libs Search vendor "Bluez" for product "Bluez-libs"				< 3.34 Search vendor "Bluez" for product "Bluez-libs" and version " < 3.34"		-		Affected
Bluez Search vendor "Bluez"		Bluez-utils Search vendor "Bluez" for product "Bluez-utils"				< 3.34 Search vendor "Bluez" for product "Bluez-utils" and version " < 3.34"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				8 Search vendor "Fedoraproject" for product "Fedora" and version "8"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				9 Search vendor "Fedoraproject" for product "Fedora" and version "9"		-		Affected