CyberRota Analysis
AI-GeneratedA stack-based buffer overflow vulnerability in the BlueZ Bluetooth protocol stack affects Linux systems, allowing remote attackers within Bluetooth range to exploit the flaw by sending specially crafted Extended Inquiry Response packets. This can result in a Denial of Service (DoS) by crashing the bluetoothd service and may potentially enable arbitrary code execution on the affected device. Organizations using Bluetooth-enabled Linux devices should prioritize patching this vulnerability to mitigate the associated risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response (EIR) packet that causes a buffer overflow when the target device performs Bluetooth discovery. This vulnerability can lead to a Denial of Service (DoS) by crashing the bluetoothd service and may allow for arbitrary code execution.