Heap Data Leak Vulnerability in BlueZ Bluetooth Stack by the Linux Foundation
CVE-2019-8921
6.5MEDIUM
Summary
A vulnerability exists in the BlueZ Bluetooth stack where the handling of SVC_ATTR_REQ in the SDP implementation may lead to a heap data leak. This occurs when a crafted CSTATE allows a malicious actor to exploit the server's trust in consecutive requests. The flaw in function service_attr_req of sdpd-request.c results in the server potentially returning more bytes than the allocated buffer can handle, leaking arbitrary heap data. This mishandling emphasizes the importance of rigorous data validation in service responses to maintain system integrity.
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved