bluez: information leak in service_attr_req() in sdpd-request.c via a crafted CSTATE
Published Nov 29, 2021
6.5
MEDIUMCVSS 3.1
EPSS 1.01%
Description
An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrary heap data. The root cause can be found in the function service_attr_req of sdpd-request.c. The server does not check whether the CSTATE data is the same in consecutive requests, and instead simply trusts that it is the same.
Affected products
No data.
Configuration 1
Running on/with
- n/a
Configuration 2
- 10.0
No data.
Red Hat Enterprise Linux 6
bluez
Out of support scope
Red Hat Enterprise Linux 7
bluez
Will not fix
Red Hat Enterprise Linux 8
bluez
Not affected
Red Hat Enterprise Linux 9
bluez
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | bluez | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | bluez | Will not fix | n/a |
| Red Hat Enterprise Linux 8 | bluez | Not affected | n/a |
| Red Hat Enterprise Linux 9 | bluez | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (7)
- https://access.redhat.com/security/cve/CVE-2019-8921 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2027458 Issue Tracking
- https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html mailing-listMailing ListThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2019-8921
- https://security.netapp.com/advisory/ntap-20211203-0002/ Third Party Advisory
- https://ssd-disclosure.com/ssd-advisory-linux-bluez-information-leak-and-heap-overflow/ ExploitPatchThird Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2019-8921
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2019-8921 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2027458 | Issue Tracking | |
| https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html | mailing-listMailing ListThird Party Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2019-8921 | ||
| https://security.netapp.com/advisory/ntap-20211203-0002/ | Third Party Advisory | |
| https://ssd-disclosure.com/ssd-advisory-linux-bluez-information-leak-and-heap-overflow/ | ExploitPatchThird Party Advisory | |
| https://www.cve.org/CVERecord?id=CVE-2019-8921 |
Change history (0)
No recorded changes yet.