CVE-2016-9797

Name of the Vulnerable Software and Affected Versions BlueZ version 5.42

Description A buffer over-read issue was found in the l2cap dump function in the tools/parser/l2cap.c source file. This issue can be triggered by processing a corrupted dump file, resulting in an hcidump crash.

Recommendations For BlueZ version 5.42, as a temporary workaround, consider disabling the l2cap dump function in the tools/parser/l2cap.c source file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.