Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In BlueZ 5.42, a buffer overflow was observed in "pin_code_reply_dump" function in "tools/parser/hci.c" source file. The issue exists because "pin" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "pin_code_reply_cp *cp" parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BlueZ 缓冲区溢出漏洞
Vulnerability Description
BlueZ是一套官方的Linux蓝牙协议栈。 BlueZ 5.42版本的tools/parser/hci.c源文件中的‘pin_code_reply_dump’函数存在缓冲区溢出漏洞，该漏洞源于程序没有对参数执行充分的边界检查。攻击者可利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A