Bug 187946

Summary:	CVE-2006-0670 bluez-hcidump Denial of Service
Product:	[Fedora] Fedora	Reporter:	Josh Bressers <bressers>
Component:	bluez-hcidump	Assignee:	David Woodhouse <dwmw2>
Status:	CLOSED RAWHIDE	QA Contact:
Severity:	low	Docs Contact:
Priority:	medium
Version:	5	Keywords:	Security
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	source=vulnwatch,public=20060205,reported=20060205,impact=low
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-07-21 09:49:24 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Josh Bressers 2006-04-04 20:01:29 UTC

bluez-hcidump Denial of Service

http://www.secuobs.com/news/05022006-bluetooth10.shtml

"ubuntu: Pierre Betouin discovered a Denial of Service
vulnerability in the handling of the L2CAP (Logical Link
Control and Adaptation Layer Protocol) layer. By sending a
specially crafted L2CAP packet through a wireless Bluetooth
connection, a remote attacker could crash hcidump.  Since
hcidump is mainly a debugging tool, the impact of this flaw is
very low."

The patch is here:
http://cvs.sourceforge.net/viewcvs.py/bluez/hcidump/parser/l2cap.c?r1=1.51&r2=1.52&diff_format=u


This issue also affects FC4