CVE-2016-7837
Severity CVSS v4.0:
Pending analysis
Type:
CWE-119
Buffer Errors
Publication date:
09/06/2017
Last modified:
20/04/2025
Description
Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH
Base Score 2.0
4.60
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:bluez:bluez:*:*:*:*:*:*:*:* | 5.41 (including) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://www.securityfocus.com/bid/95067
- https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=8514068150759c1d6a46d4605d2351babfde1601
- https://jvn.jp/en/jp/JVN38755305/index.html
- https://usn.ubuntu.com/4311-1/
- http://www.securityfocus.com/bid/95067
- https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=8514068150759c1d6a46d4605d2351babfde1601
- https://jvn.jp/en/jp/JVN38755305/index.html
- https://usn.ubuntu.com/4311-1/



