Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2008-2374

CRITICAL9.8

src/sdp

Published Jul 7, 2008

Modified 12 months ago

No fix available

Details

src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field that triggers excessive memory allocation or a buffer over-read.

References

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.html ADVISORYhttp://secunia.com/advisories/30957 ADVISORYhttp://secunia.com/advisories/31057 ADVISORYhttp://secunia.com/advisories/31833 ADVISORYhttp://secunia.com/advisories/32099 ADVISORYhttp://secunia.com/advisories/32279 ADVISORYhttp://secunia.com/advisories/34280 ADVISORYhttp://security.gentoo.org/glsa/glsa-200903-29.xml WEBhttp://sourceforge.net/mailarchive/message.php?msg_name=b32d44000806161327u680c290au54fd21f2fef1d58e%40mail.gmail.com WEBhttp://www.bluez.org/bluez-334/ADVISORYhttp://www.mandriva.com/security/advisories?name=MDVSA-2008:145 ADVISORYhttp://www.redhat.com/support/errata/RHSA-2008-0581.html WEBhttp://www.securityfocus.com/bid/30105 WEBhttp://www.securitytracker.com/id?1020479 WEBhttp://www.vupen.com/english/advisories/2008/2096/references WEBhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9973 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2008-2374 ADVISORYhttps://www.redhat.com/archives/fedora-package-announce/2008-October/msg00396.html ADVISORYhttps://www.redhat.com/archives/fedora-package-announce/2008-September/msg00233.html

CVSS Analysis

CVSS v3.1

9.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedJul 7, 2008

ModifiedJan 17, 2025

CVE-2008-2374 | Mondoo Vulnerability Intelligence