]> code.ossystems Code Review - openembedded-core.git/commit
bluez5: fix out-of-bounds access in SDP server (CVE-2017-1000250)
authorRoss Burton <ross.burton@intel.com>
Wed, 13 Sep 2017 15:59:09 +0000 (16:59 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sun, 7 Jan 2018 17:06:35 +0000 (17:06 +0000)
commitc8f4cd337b9cc5c5c3fc40c6a6d8d2394fdc9ea3
tree08cd04fd4946bab14f584ef892363e5d0d0f4742
parent60f2c790d5e83c1a55d7a40b32a7cef6a5a5eab6
bluez5: fix out-of-bounds access in SDP server (CVE-2017-1000250)

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an
information disclosure vulnerability which allows remote attackers to obtain
sensitive information from the bluetoothd process memory. This vulnerability
lies in the processing of SDP search attribute requests.

(From OE-Core rev: d25716ceb3ffcdfcfa54516596bd94bf5c050bac)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-connectivity/bluez5/bluez5.inc
meta/recipes-connectivity/bluez5/bluez5/cve-2017-1000250.patch [new file with mode: 0644]