CVE-2008-2374 - CVE House
Back to Database
Status published Unknown CVE-2008-2374

src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before...

Vulnerability Description

src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field that triggers excessive memory allocation or a buffer over-read.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-2374

Credits & Attribution

No credits recorded in the NVD database.

References

More from bluez

View All →
CVE-2022-39177
BlueZ before 5.59 allows physically proximate attackers to cause a...
Unknown 0
CVE-2022-39176
BlueZ before 5.59 allows physically proximate attackers to obtain sensitive...
Unknown 0
CVE-2021-43400
An issue was discovered in gatt-database.c in BlueZ 5.61. A...
Critical 9.1
CVE-2021-41229
Memory leak in BlueZ
Medium 4.3
CVE-2020-27153
In BlueZ before 5.55, a double free was found in...
Unknown 0

Affected Vendor

Affected Software

bluez-libs, bluez-utils, fedora
Vulnerable Versions:
0, 8, 9

Timeline

Official Publish: July 7th, 2008
Last Modified: January 17th, 2025
Added to House: July 18th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.