Nom du paquet
bluez-hcidump
Date
2006-02-17
Advisory ID
MDKSA-2006:041
Affected versions
2006.0 i586 , 10.2 i586 , CS3.0 x86_64 , CS3.0 i586 , 10.2 x86_64 , 2006.0 x86_64

Problem description

Buffer overflow in l2cap.c in hcidump allows remote attackers to cause a
denial of service (crash) through a wireless Bluetooth connection via a
malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.

The updated packages have been patched to correct this issue.

Updated packages

2006.0 i586

 992e63ff9dbccf86049f59ca92bad792  2006.0/RPMS/bluez-hcidump-1.24-1.1.20060mdk.i586.rpm
 b2ab6307253819dfae92578c64f3ce94  2006.0/SRPMS/bluez-hcidump-1.24-1.1.20060mdk.src.rpm

10.2 i586

 94e778de5cdaf114f416aca0919d598c  10.2/RPMS/bluez-hcidump-1.16-1.1.102mdk.i586.rpm
 048a366f1c0ae9891e8775edbcaecf24  10.2/SRPMS/bluez-hcidump-1.16-1.1.102mdk.src.rpm

CS3.0 x86_64

 8ece809d42791295ebbd138d3a1baf2e  x86_64/corporate/3.0/RPMS/bluez-hcidump-1.5-2.1.C30mdk.x86_64.rpm
 c883e93a86577bcd7f17a625dc697a47  x86_64/corporate/3.0/SRPMS/bluez-hcidump-1.5-2.1.C30mdk.src.rpm

CS3.0 i586

 d1562912d7c3fb7f9910f931622659fd  corporate/3.0/RPMS/bluez-hcidump-1.5-2.1.C30mdk.i586.rpm
 c883e93a86577bcd7f17a625dc697a47  corporate/3.0/SRPMS/bluez-hcidump-1.5-2.1.C30mdk.src.rpm

10.2 x86_64

 56aa32df9e420f08509f4a3bd8f22a04  x86_64/10.2/RPMS/bluez-hcidump-1.16-1.1.102mdk.x86_64.rpm
 048a366f1c0ae9891e8775edbcaecf24  x86_64/10.2/SRPMS/bluez-hcidump-1.16-1.1.102mdk.src.rpm

2006.0 x86_64

 c076b2632332855273cc93a4b7cb7808  x86_64/2006.0/RPMS/bluez-hcidump-1.24-1.1.20060mdk.x86_64.rpm
 b2ab6307253819dfae92578c64f3ce94  x86_64/2006.0/SRPMS/bluez-hcidump-1.24-1.1.20060mdk.src.rpm

References