Description
Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | bluez-hcidump | 1.17-1sarge1 | DSA-990-1 |
Advisories 1
- DSA-990-1 bluez-hcidump - programming error Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20060206 [ Secuobs - Advisory ] Bluetooth : DoS on hcidump mailing-list
- MDKSA-2006:041 vendor-advisory
- 23056 vdb-entry
- 18971 third-party-advisory
- ADV-2006-0479 vdb-entry
- DSA-990 vendor-advisory
- 18741 third-party-advisory
- 20060206 [ Secuobs - Advisory ] Bluetooth : DoS on hcidump 1.29 + PoC mailing-list
- USN-256-1 vendor-advisory
- hcidump-bluetooth-dos(24533) vdb-entry
- 465 third-party-advisory
- http://www.secuobs.com/news/05022006-bluetooth9.shtml#english
- 19122 third-party-advisory