bluez用のこの更新プログラムでは、以下の問題が修正されています：

キャッシュサイドチャネル攻撃の軽減：

CVE-2016-9797：l2cap_dump()でのバッファオーバーリードを修正しました（bsc#1013708）。

CVE-2016-9798：conf_opt()でのメモリ解放後使用（Use After Free）を修正しました（bsc#1013712）。

CVE-2016-9917：read_n()でのヒープベースのバッファオーバーフローを修正しました（bsc#1015171）。

CVE-2016-9802：l2cap_packet()でのバッファオーバーリードを修正しました（bsc#1013893）。

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、そこに新しい問題を追加することはせずに、できる限り自動的に整理と書式設定をするようにしています。

bluez用のこの更新プログラムでは、以下の問題が修正されています：

修正されたセキュリティ問題：

  - CVE-2016-9797：l2cap_dump()でのバッファオーバーリードを修正しました（bsc#1013708）。

  - CVE-2016-9798：conf_opt()でのメモリ解放後使用（Use After Free）を修正しました（bsc#1013712）。

  - CVE-2016-9917：read_n()でのヒープベースのバッファオーバーフローを修正しました（bsc#1015171）。

この更新はSUSEからインポートされました：SLE-15：更新プロジェクトを更新します。

bluez用のこの更新プログラムでは、以下の問題が修正されています：

対応済みセキュリティ脆弱性：

CVE-2016-9797：l2cap_dump()でのバッファオーバーリードを修正しました（bsc#1013708）。

CVE-2016-9798：conf_opt()でのメモリ解放後使用（Use After Free）を修正しました（bsc#1013712）。

CVE-2016-9917：read_n()でのヒープベースのバッファオーバーフローを修正しました（bsc#1015171）。

CVE-2016-9802：l2cap_packet()でのバッファオーバーリードを修正しました（bsc#1013893）。

CVE-2016-9918：packet_hexdump()での領域外スタック読み取りを修正しました。この読み取りは、破損したダンプファイルを処理することで引きここされ、hcidumpツールをクラッシュさせる可能性がありました（bsc#1015173）。

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、そこに新しい問題を追加することはせずに、できる限り自動的に整理と書式設定をするようにしています。

bluez用のこの更新プログラムでは、以下の問題が修正されています：

修正されたセキュリティ問題：

CVE-2016-9797：l2cap_dump()でのバッファオーバーリードを修正しました（bsc#1013708）。

CVE-2016-9798：conf_opt()でのメモリ解放後使用（Use After Free）を修正しました（bsc#1013712）。

CVE-2016-9917：read_n()でのヒープベースのバッファオーバーフローを修正しました（bsc#1015171）。

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、そこに新しい問題を追加することはせずに、できる限り自動的に整理と書式設定をするようにしています。

This update for bluez fixes the following issues :

Security issues fixed :

CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708).

CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).

CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the bluez package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In BlueZ 5.42, a use-after-free was identified in     'conf_opt' function in 'tools/parser/l2cap.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in hcidump     crash.(CVE-2016-9798)

  - In BlueZ 5.42, a buffer overflow was observed in     'pin_code_reply_dump' function in 'tools/parser/hci.c'     source file. The issue exists because 'pin' array is     overflowed by supplied parameter due to lack of     boundary checks on size of the buffer from frame     'pin_code_reply_cp *cp' parameter.(CVE-2016-9800)

  - In BlueZ 5.42, a buffer overflow was observed in     'set_ext_ctrl' function in 'tools/parser/l2cap.c'     source file when processing corrupted dump     file.(CVE-2016-9801)

  - In BlueZ 5.42, a buffer over-read was identified in     'l2cap_packet' function in 'monitor/packet.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in btmon     crash.(CVE-2016-9802)

  - In BlueZ 5.42, a buffer overflow was observed in     'commands_dump' function in 'tools/parser/csr.c' source     file. The issue exists because 'commands' array is     overflowed by supplied parameter due to lack of     boundary checks on size of the buffer from frame     'frm->ptr' parameter. This issue can be triggered by     processing a corrupted dump file and will result in     hcidump crash.(CVE-2016-9804)

  - In BlueZ 5.42, a buffer overflow was observed in     'read_n' function in 'tools/hcidump.c' source file.
    This issue can be triggered by processing a corrupted     dump file and will result in hcidump     crash.(CVE-2016-9917)

  - In BlueZ 5.42, an out-of-bounds read was identified in     'packet_hexdump' function in 'monitor/packet.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in btmon     crash.(CVE-2016-9918)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - bluez: heap-based buffer overflow via crafted request (CVE-2019-8922)

  - Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line     function used in some userland utilities. (CVE-2016-7837)

  - In BlueZ 5.42, a buffer over-read was observed in l2cap_dump function in tools/parser/l2cap.c source     file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
    (CVE-2016-9797)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - bluez: Buffer overflow in parse_line function (CVE-2016-7837)

  - In BlueZ 5.42, a buffer over-read was observed in l2cap_dump function in tools/parser/l2cap.c source     file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
    (CVE-2016-9797)

  - In BlueZ 5.42, a use-after-free was identified in conf_opt function in tools/parser/l2cap.c source     file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
    (CVE-2016-9798)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In BlueZ 5.42, a use-after-free was identified in     'conf_opt' function in 'tools/parser/l2cap.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in hcidump     crash.(CVE-2016-9798)

  - In BlueZ 5.42, a buffer overflow was observed in     'pin_code_reply_dump' function in 'tools/parser/hci.c'     source file. The issue exists because 'pin' array is     overflowed by supplied parameter due to lack of     boundary checks on size of the buffer from frame     'pin_code_reply_cp *cp' parameter.(CVE-2016-9800)

  - In BlueZ 5.42, a buffer overflow was observed in     'set_ext_ctrl' function in 'tools/parser/l2cap.c'     source file when processing corrupted dump     file.(CVE-2016-9801)

  - In BlueZ 5.42, a buffer over-read was identified in     'l2cap_packet' function in 'monitor/packet.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in btmon     crash.(CVE-2016-9802)

  - In BlueZ 5.42, a buffer overflow was observed in     'commands_dump' function in 'tools/parser/csr.c' source     file. The issue exists because 'commands' array is     overflowed by supplied parameter due to lack of     boundary checks on size of the buffer from frame     'frm->ptr' parameter. This issue can be triggered by     processing a corrupted dump file and will result in     hcidump crash.(CVE-2016-9804)

  - In BlueZ 5.42, a buffer overflow was observed in     'read_n' function in 'tools/hcidump.c' source file.
    This issue can be triggered by processing a corrupted     dump file and will result in hcidump     crash.(CVE-2016-9917)

  - In BlueZ 5.42, an out-of-bounds read was identified in     'packet_hexdump' function in 'monitor/packet.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in btmon     crash.(CVE-2016-9918)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the bluez packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In BlueZ 5.42, a use-after-free was identified in     'conf_opt' function in 'tools/parser/l2cap.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in hcidump     crash.(CVE-2016-9798)

  - In BlueZ 5.42, a buffer overflow was observed in     'pin_code_reply_dump' function in 'tools/parser/hci.c'     source file. The issue exists because 'pin' array is     overflowed by supplied parameter due to lack of     boundary checks on size of the buffer from frame     'pin_code_reply_cp *cp' parameter.(CVE-2016-9800)

  - In BlueZ 5.42, a buffer overflow was observed in     'set_ext_ctrl' function in 'tools/parser/l2cap.c'     source file when processing corrupted dump     file.(CVE-2016-9801)

  - In BlueZ 5.42, a buffer over-read was identified in     'l2cap_packet' function in 'monitor/packet.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in btmon     crash.(CVE-2016-9802)

  - In BlueZ 5.42, a buffer overflow was observed in     'commands_dump' function in 'tools/parser/csr.c' source     file. The issue exists because 'commands' array is     overflowed by supplied parameter due to lack of     boundary checks on size of the buffer from frame     'frm->ptr' parameter. This issue can be triggered by     processing a corrupted dump file and will result in     hcidump crash.(CVE-2016-9804)

  - In BlueZ 5.42, a buffer overflow was observed in     'read_n' function in 'tools/hcidump.c' source file.
    This issue can be triggered by processing a corrupted     dump file and will result in hcidump     crash.(CVE-2016-9917)

  - In BlueZ 5.42, an out-of-bounds read was identified in     'packet_hexdump' function in 'monitor/packet.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in btmon     crash.(CVE-2016-9918)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for bluez fixes the following issues :

Security vulnerability addressed :

CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708).

CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).

CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171).

CVE-2016-9802: Fixed a buffer over-read in l2cap_packet() (bsc#1013893).

CVE-2016-9918: Fixed an out-of-bounds stack read in packet_hexdump(), which could be triggered by processing a corrupted dump file and will result in a crash of the hcidump tool (bsc#1015173)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for bluez fixes the following issues :

Security issues fixed :

CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708).

CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).

CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171).

CVE-2016-9802: Fixed a buffer over-read in l2cap_packet() (bsc#1013893).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for bluez fixes the following issues :

Security issues fixed :

  - CVE-2016-9797: Fixed a buffer over-read in l2cap_dump()     (bsc#1013708).

  - CVE-2016-9798: Fixed a use-after-free in conf_opt()     (bsc#1013712).

  - CVE-2016-9917: Fixed a heap-based buffer overflow in     read_n() (bsc#1015171).

This update was imported from the SUSE:SLE-15:Update update project.

According to the versions of the bluez packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In BlueZ 5.42, a buffer overflow was observed in     'commands_dump' function in 'tools/parser/csr.c' source     file. The issue exists because 'commands' array is     overflowed by supplied parameter due to lack of     boundary checks on size of the buffer from frame     'frm->ptr' parameter. This issue can be triggered by     processing a corrupted dump file and will result in     hcidump crash.(CVE-2016-9804)

  - In BlueZ 5.42, a buffer overflow was observed in     'pin_code_reply_dump' function in 'tools/parser/hci.c'     source file. The issue exists because 'pin' array is     overflowed by supplied parameter due to lack of     boundary checks on size of the buffer from frame     'pin_code_reply_cp *cp' parameter.(CVE-2016-9800)

  - In BlueZ 5.42, a buffer overflow was observed in     'read_n' function in 'tools/hcidump.c' source file.
    This issue can be triggered by processing a corrupted     dump file and will result in hcidump     crash.(CVE-2016-9917)

  - In BlueZ 5.42, a buffer overflow was observed in     'set_ext_ctrl' function in 'tools/parser/l2cap.c'     source file when processing corrupted dump     file.(CVE-2016-9801)

  - In BlueZ 5.42, a buffer over-read was identified in     'l2cap_packet' function in 'monitor/packet.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in btmon     crash.(CVE-2016-9802)

  - In BlueZ 5.42, a use-after-free was identified in     'conf_opt' function in 'tools/parser/l2cap.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in hcidump     crash.(CVE-2016-9798)

  - In BlueZ 5.42, an out-of-bounds read was identified in     'packet_hexdump' function in 'monitor/packet.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in btmon     crash.(CVE-2016-9918)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the bluez package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - In BlueZ 5.42, an out-of-bounds read was identified in     'packet_hexdump' function in 'monitor/packet.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in btmon     crash.(CVE-2016-9918)

  - In BlueZ 5.42, a buffer overflow was observed in     'read_n' function in 'tools/hcidump.c' source file.
    This issue can be triggered by processing a corrupted     dump file and will result in hcidump     crash.(CVE-2016-9917)

  - In BlueZ 5.42, a buffer overflow was observed in     'commands_dump' function in 'tools/parser/csr.c' source     file. The issue exists because 'commands' array is     overflowed by supplied parameter due to lack of     boundary checks on size of the buffer from frame     'frm->ptr' parameter. This issue can be triggered by     processing a corrupted dump file and will result in     hcidump crash.(CVE-2016-9804)

  - In BlueZ 5.42, a buffer over-read was identified in     'l2cap_packet' function in 'monitor/packet.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in btmon     crash.(CVE-2016-9802)

  - In BlueZ 5.42, a buffer overflow was observed in     'set_ext_ctrl' function in 'tools/parser/l2cap.c'     source file when processing corrupted dump     file.(CVE-2016-9801)

  - In BlueZ 5.42, a buffer overflow was observed in     'pin_code_reply_dump' function in 'tools/parser/hci.c'     source file. The issue exists because 'pin' array is     overflowed by supplied parameter due to lack of     boundary checks on size of the buffer from frame     'pin_code_reply_cp *cp' parameter.(CVE-2016-9800)

  - In BlueZ 5.42, a use-after-free was identified in     'conf_opt' function in 'tools/parser/l2cap.c' source     file. This issue can be triggered by processing a     corrupted dump file and will result in hcidump     crash.(CVE-2016-9798)

  - In BlueZ before 5.55, a double free was found in the     gatttool disconnect_cb() routine from shared/att.c. A     remote attacker could potentially cause a denial of     service or code execution, during service discovery,     due to a redundant disconnect MGMT     event.(CVE-2020-27153)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
130087	SUSE SLED15 / SLES15セキュリティ更新プログラム：bluez（SUSE-SU-2019:1353-2）	Nessus	SuSE Local Security Checks	2019/10/21	2024/4/17	high
125618	openSUSEセキュリティ更新プログラム：bluez（openSUSE-2019-1476）	Nessus	SuSE Local Security Checks	2019/5/31	2024/5/17	high
125459	SUSE SLED12 / SLES12セキュリティ更新プログラム：bluez（SUSE-SU-2019:1339-1）	Nessus	SuSE Local Security Checks	2019/5/28	2024/5/20	high
125467	SUSE SLED15 / SLES15セキュリティ更新プログラム：bluez（SUSE-SU-2019:1353-1）	Nessus	SuSE Local Security Checks	2019/5/28	2024/5/20	high
125467	SUSE SLED15 / SLES15 Security Update : bluez (SUSE-SU-2019:1353-1)	Nessus	SuSE Local Security Checks	2019/5/28	2024/5/20	high
147516	EulerOS Virtualization 3.0.2.6 : bluez (EulerOS-SA-2021-1427)	Nessus	Huawei Local Security Checks	2021/3/10	2024/1/11	high
151392	EulerOS Virtualization 3.0.2.2 : bluez (EulerOS-SA-2021-2129)	Nessus	Huawei Local Security Checks	2021/7/6	2023/12/11	high
198714	RHEL 7 : bluez (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	high
198724	RHEL 5 : bluez (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	high
147616	EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2021-1460)	Nessus	Huawei Local Security Checks	2021/3/10	2024/1/10	high
131872	EulerOS 2.0 SP2 : bluez (EulerOS-SA-2019-2380)	Nessus	Huawei Local Security Checks	2019/12/10	2024/4/4	high
125459	SUSE SLED12 / SLES12 Security Update : bluez (SUSE-SU-2019:1339-1)	Nessus	SuSE Local Security Checks	2019/5/28	2024/5/20	high
130087	SUSE SLED15 / SLES15 Security Update : bluez (SUSE-SU-2019:1353-2)	Nessus	SuSE Local Security Checks	2019/10/21	2024/4/17	high
125618	openSUSE Security Update : bluez (openSUSE-2019-1476)	Nessus	SuSE Local Security Checks	2019/5/31	2024/5/17	high
132276	EulerOS 2.0 SP3 : bluez (EulerOS-SA-2019-2559)	Nessus	Huawei Local Security Checks	2019/12/19	2024/4/3	high
146182	EulerOS 2.0 SP5 : bluez (EulerOS-SA-2021-1179)	Nessus	Huawei Local Security Checks	2021/2/4	2024/1/23	high
151295	EulerOS Virtualization for ARM 64 3.0.2.0 : bluez (EulerOS-SA-2021-2088)	Nessus	Huawei Local Security Checks	2021/7/2	2023/12/11	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high