CVE-2018-16056 - wireshark: Bluetooth Attribute Protocol dissector crash

Back Back to CVE browser

HIGH

wireshark: Bluetooth Attribute Protocol dissector crash

Published Aug 30, 2018

7.5

HIGH

CVSS 3.0

EPSS 3.45%

Description

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by verifying that a dissector for a specific UUID exists.

Affected products

Red Hat Enterprise Linux 6

wireshark

Not affected
Red Hat Enterprise Linux 7

wireshark

Not affected
Red Hat Enterprise Linux 8

wireshark

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	wireshark	Not affected	n/a
Red Hat Enterprise Linux 7	wireshark	Not affected	n/a
Red Hat Enterprise Linux 8	wireshark	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (12)

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/105174
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041609
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://access.redhat.com/security/cve/CVE-2018-16056
Vendor Advisory
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994
x_refsource_MISCIssue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1625922
Issue Tracking
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f98fbce64cb230e94a2cafc410a3cedad657b485
x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-7913
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-16056
https://www.cve.org/CVERecord?id=CVE-2018-16056
https://www.debian.org/security/2018/dsa-4315
vendor-advisoryx_refsource_DEBIANThird Party Advisory
https://www.wireshark.org/security/wnpa-sec-2018-45.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html		vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/105174		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041609		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://access.redhat.com/security/cve/CVE-2018-16056		Vendor Advisory
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994		x_refsource_MISCIssue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1625922		Issue Tracking
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f98fbce64cb230e94a2cafc410a3cedad657b485		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-7913		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-16056
https://www.cve.org/CVERecord?id=CVE-2018-16056
https://www.debian.org/security/2018/dsa-4315		vendor-advisoryx_refsource_DEBIANThird Party Advisory
https://www.wireshark.org/security/wnpa-sec-2018-45.html		x_refsource_MISCVendor Advisory