New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 734327 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner:
Last visit 21 days ago
Closed: Jun 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug-Security



Sign in to add a comment

CrOS: Vulnerability reported in net-wireless/bluez

Project Member Reported by vomit.go...@appspot.gserviceaccount.com, Jun 17 2017

Issue description

Automated analysis has detected that the following third party packages have had vulnerabilities publicly reported. 

NOTE: There may be several bugs listed below - in almost all cases, all bugs can be quickly addressed by upgrading to the latest version of the package.

Package Name: net-wireless/bluez
Package Version: [cpe:/a:bluez:bluez-libs:5.41 cpe:/a:bluez:bluez-libs:5.44 cpe:/a:bluez:bluez:5.41 cpe:/a:bluez:bluez:5.44]

Advisory: CVE-2016-7837
  Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2016-7837
  CVSS severity score: 4.6/10.0
  Confidence: high
  Description:

Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.


 

Comment 1 by est...@chromium.org, Jun 17 2017

Owner: jorgelo@chromium.org
Status: Assigned (was: Untriaged)
Over to jorgelo for triage, please
Cc: jorgelo@chromium.org
Owner: snanda@chromium.org
Sameer, who owns Bluetooth for CrOS?

Comment 3 by snanda@chromium.org, Jun 19 2017

Cc: mcchou@chromium.org snanda@chromium.org
Owner: dmitrygr@google.com
We've recently updated our bluez stack to 5.44.

Dmitry, could you please take a look and see if it impacts 5.44 too?

Comment 4 by dmitrygr@google.com, Jun 19 2017

5.42 and later are not vulnerable it seems
and not easily exploitable on chromeos as we do not allow arbitrary code to run bluez-utils apps

Status: WontFix (was: Assigned)
Agreed. Marking WontFix. Thanks Sameer and Dmitry.
Components: OS>Systems>Bluetooth
Project Member

Comment 7 by sheriffbot@chromium.org, Sep 26 2017

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment