Red Hat Security AdvisoryRHSA-2008:0581
bluez-libs and bluez-utils security update
Released 2008-07-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) bluez-libs-3.7-1.1, bluez-libs-3.7-1.1.i386, bluez-libs-3.7-1.1.ia64 +13
- Red Hat Enterprise Linux AS version 4 bluez-libs-2.10-3, bluez-libs-2.10-3.i386, bluez-libs-2.10-3.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) bluez-libs-3.7-1.1, bluez-libs-3.7-1.1.i386, bluez-utils-3.7-2.2 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bluez-libs-3.7-1.1, bluez-libs-devel-3.7-1.1, bluez-libs-devel-3.7-1.1.i386
- Red Hat Enterprise Linux Desktop version 4 bluez-libs-2.10-3, bluez-libs-2.10-3.i386, bluez-libs-devel-2.10-3 +5
- Red Hat Enterprise Linux ES version 4 bluez-libs-2.10-3, bluez-libs-2.10-3.i386, bluez-libs-2.10-3.ia64 +9
- Red Hat Enterprise Linux WS version 4 bluez-libs-2.10-3, bluez-libs-2.10-3.i386, bluez-libs-2.10-3.ia64 +9
Fixes 1 record
Priority MEDIUM 56
src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of se…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04287 · Published 2008-07-07 · Fixed CWE-1284
