CVE catalog

CVE-2016-9798

bluez: CVE-2016-9798

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
3.85% · Oct 25, 2026

In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianbluezsid5.87-5vulnerable
Debianbluezforky5.87-5vulnerable
Debianblueztrixie5.82-1.1vulnerable
Debianbluezbookworm5.66-1+deb12u2vulnerable
Debianbluezbookworm-security5.66-1+deb12u1vulnerable
Susebluezlinux enterprise module for basesystem 155.48-5.19.1fixed
Susebluezlinux enterprise module for basesystem 15 sp15.48-5.19.1fixed
Susebluezlinux enterprise module for desktop applications 155.48-5.19.1fixed
Susebluezlinux enterprise module for desktop applications 15 sp15.48-5.19.1fixed
Susebluezlinux enterprise workstation extension 155.48-5.19.1fixed
Susebluezlinux enterprise workstation extension 15 sp15.48-5.19.1fixed
Susebluezlinux enterprise desktop 12 sp45.13-5.15.3fixed
Susebluezlinux enterprise software development kit 12 sp45.13-5.15.3fixed
Susebluezlinux enterprise software development kit 12 sp55.13-5.15.3fixed
Susebluezlinux enterprise server 12 sp45.13-5.15.3fixed
Susebluezlinux enterprise server for sap applications 12 sp45.13-5.15.3fixed
Susebluezlinux enterprise server 12 sp55.13-5.15.3fixed
Susebluezlinux enterprise server for sap applications 12 sp55.13-5.15.3fixed
Susebluezlinux enterprise workstation extension 12 sp45.13-5.15.3fixed
Susebluezlinux enterprise workstation extension 12 sp55.13-5.15.3fixed
Opensusebluezleap 15.15.48-lp151.8.6.1fixed
Opensusebluezleap 15.05.48-lp150.4.16.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianbluezsourcesid(unfixed)unimportantNot reported[847837]
Debianbluezsourceforky(unfixed)unimportantNot reported[847837]
Debianbluezsourcetrixie(unfixed)unimportantNot reported[847837]
Debianbluezsourcebookworm(unfixed)unimportantNot reported[847837]
Susebluezrpmlinux enterprise module for basesystem 155.48-5.19.1Not reportedSUSE-SU-2019:3046-1Not reported
Susebluezrpmlinux enterprise module for basesystem 15 sp15.48-5.19.1Not reportedSUSE-SU-2019:3046-1Not reported
Susebluezrpmlinux enterprise module for desktop applications 155.48-5.19.1Not reportedSUSE-SU-2019:3046-1Not reported
Susebluezrpmlinux enterprise module for desktop applications 15 sp15.48-5.19.1Not reportedSUSE-SU-2019:3046-1Not reported
Susebluezrpmlinux enterprise workstation extension 155.48-5.19.1Not reportedSUSE-SU-2019:3046-1Not reported
Susebluezrpmlinux enterprise workstation extension 15 sp15.48-5.19.1Not reportedSUSE-SU-2019:3046-1Not reported
Susebluezrpmlinux enterprise desktop 12 sp45.13-5.15.3Not reportedSUSE-SU-2019:2915-1Not reported
Susebluezrpmlinux enterprise software development kit 12 sp45.13-5.15.3Not reportedSUSE-SU-2019:2915-1Not reported
Susebluezrpmlinux enterprise software development kit 12 sp55.13-5.15.3Not reportedSUSE-SU-2019:2915-1Not reported
Susebluezrpmlinux enterprise server 12 sp45.13-5.15.3Not reportedSUSE-SU-2019:2915-1Not reported
Susebluezrpmlinux enterprise server for sap applications 12 sp45.13-5.15.3Not reportedSUSE-SU-2019:2915-1Not reported
Susebluezrpmlinux enterprise server 12 sp55.13-5.15.3Not reportedSUSE-SU-2019:2915-1Not reported
Susebluezrpmlinux enterprise server for sap applications 12 sp55.13-5.15.3Not reportedSUSE-SU-2019:2915-1Not reported
Susebluezrpmlinux enterprise workstation extension 12 sp45.13-5.15.3Not reportedSUSE-SU-2019:2915-1Not reported
Susebluezrpmlinux enterprise workstation extension 12 sp55.13-5.15.3Not reportedSUSE-SU-2019:2915-1Not reported
Opensusebluezrpmleap 15.15.48-lp151.8.6.1Not reportedOPENSUSE-SU-2019:2588-1Not reported
Opensusebluezrpmleap 15.05.48-lp150.4.16.1Not reportedOPENSUSE-SU-2019:2585-1Not reported

[Debian bug #847837]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [bluetooth]Affected

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · all · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · all · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · all · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · all · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • [bluez]Affected
    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • [bluez-cups]Affected

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • [bluez-hcidump]Affected

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • [bluez-meshd]Affected

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • [bluez-obexd]Affected

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • [bluez-source]Affected

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · all · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · all · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · all · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · all · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • [bluez-test-scripts]Affected

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · all · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · all · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · all · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · all · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • [bluez-test-tools]Affected

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • [libbluetooth3]Affected

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • [libbluetooth-dev]Affected

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Affected

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

[Debian 13 (Trixie)]

  • [bluetooth]Affected

    Source package: [bluez]

    Details (2)

    • 5.82-1.1 · all · trixie

      Affected

      dsa · bluez · debian · 13

    • 5.82-1.1 · all · trixie

      Affected

      dsa · bluez · debian · 13

  • [bluez]Affected
    Details (2)

    • 5.82-1.1 · amd64 · trixie

      Affected

      dsa · bluez · debian · 13

    • 5.82-1.1 · arm64 · trixie

      Affected

      dsa · bluez · debian · 13

  • [bluez-cups]Affected

    Source package: [bluez]

    Details (2)

    • 5.82-1.1 · amd64 · trixie

      Affected

      dsa · bluez · debian · 13

    • 5.82-1.1 · arm64 · trixie

      Affected

      dsa · bluez · debian · 13

  • [bluez-hcidump]Affected

    Source package: [bluez]

    Details (2)

    • 5.82-1.1 · amd64 · trixie

      Affected

      dsa · bluez · debian · 13

    • 5.82-1.1 · arm64 · trixie

      Affected

      dsa · bluez · debian · 13

  • [bluez-meshd]Affected

    Source package: [bluez]

    Details (2)

    • 5.82-1.1 · amd64 · trixie

      Affected

      dsa · bluez · debian · 13

    • 5.82-1.1 · arm64 · trixie

      Affected

      dsa · bluez · debian · 13

  • [bluez-obexd]Affected

    Source package: [bluez]

    Details (2)

    • 5.82-1.1 · amd64 · trixie

      Affected

      dsa · bluez · debian · 13

    • 5.82-1.1 · arm64 · trixie

      Affected

      dsa · bluez · debian · 13

  • [bluez-source]Affected

    Source package: [bluez]

    Details (2)

    • 5.82-1.1 · all · trixie

      Affected

      dsa · bluez · debian · 13

    • 5.82-1.1 · all · trixie

      Affected

      dsa · bluez · debian · 13

  • [bluez-test-scripts]Affected

    Source package: [bluez]

    Details (2)

    • 5.82-1.1 · all · trixie

      Affected

      dsa · bluez · debian · 13

    • 5.82-1.1 · all · trixie

      Affected

      dsa · bluez · debian · 13

  • [bluez-test-tools]Affected

    Source package: [bluez]

    Details (2)

    • 5.82-1.1 · amd64 · trixie

      Affected

      dsa · bluez · debian · 13

    • 5.82-1.1 · arm64 · trixie

      Affected

      dsa · bluez · debian · 13

Next results

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]