CVE-2016-9798

In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.

• CWE-416

• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00071.html
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00072.html
• http://www.securityfocus.com/bid/94652Third Party Advisory, VDB Entry
• https://www.spinics.net/lists/linux-bluetooth/msg68892.htmlExploit, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00071.html
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00072.html
• http://www.securityfocus.com/bid/94652Third Party Advisory, VDB Entry
• https://www.spinics.net/lists/linux-bluetooth/msg68892.htmlExploit, Third Party Advisory

Published

Dec 3, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9792Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9793The sock_setsockopt function in net/core/sock.c in the Linux…7.8
• CVE-2016-9794Race condition in the snd_pcm_period_elapsed function in sou…7.8
• CVE-2016-9795The casrvc program in CA Common Services, as used in CA Clie…7.8
• CVE-2016-9796Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes differ…
• CVE-2016-9797In BlueZ 5.42, a buffer over-read was observed in "l2cap_dum…
• CVE-2016-9799In BlueZ 5.42, a buffer overflow was observed in "pklg_read_…
• CVE-2016-9800In BlueZ 5.42, a buffer overflow was observed in "pin_code_r…
• CVE-2016-9801In BlueZ 5.42, a buffer overflow was observed in "set_ext_ct…
• CVE-2016-9802In BlueZ 5.42, a buffer over-read was identified in "l2cap_p…
• CVE-2016-9803In BlueZ 5.42, an out-of-bounds read was observed in "le_met…
• CVE-2016-9804In BlueZ 5.42, a buffer overflow was observed in "commands_d…