Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - hcidump 1.29 中 l2cap.c 的緩衝區溢位允許遠端攻擊者透過格式錯誤的邏輯連結控制和適配通訊協定 (L2CAP) 封包，透過無線藍牙連線造成拒絕服務 (當機)。 (CVE-2006-0670)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - hcidump 1.29 中的 l2cap.c 中存在缓冲区溢出，允许远程攻击者通过畸形的逻辑链路控制和适配协议 (L2CAP) 数据包通过无线蓝牙连接造成拒绝服务（崩溃）。 (CVE-2006-0670)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - hcidump 1.29 の l2cap.c のバッファオーバーフローにより、リモートの攻撃者が、無効な形式の Logical Link Control and Adaptation Protocol（L2CAP）パケットからワイヤレス Bluetooth 接続を通じて、サービス拒否（クラッシュ）を引き起こす可能性があります。 （CVE-2006-0670）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Buffer overflow in l2cap.c in hcidump allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.

The updated packages have been patched to correct this issue.

A denial of service condition has been discovered in bluez-hcidump, a utility that analyses Bluetooth HCI packets, which can be triggered remotely.

Pierre Betouin discovered a Denial of Service vulnerability in the handling of the L2CAP (Logical Link Control and Adaptation Layer Protocol) layer. By sending a specially crafted L2CAP packet through a wireless Bluetooth connection, a remote attacker could crash hcidump.

Since hcidump is mainly a debugging tool, the impact of this flaw is very low.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash)     through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol     (L2CAP) packet. (CVE-2006-0670)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
217029	Linux Distros 未修補弱點：CVE-2006-0670	Nessus	Misc.	2025/3/3	2026/1/28	high
217029	Linux Distros 未修补的漏洞: CVE-2006-0670	Nessus	Misc.	2025/3/3	2026/1/28	high
217029	Linux Distros のパッチ未適用の脆弱性: CVE-2006-0670	Nessus	Misc.	2025/3/3	2026/1/28	high
20940	Mandrake Linux Security Advisory : bluez-hcidump (MDKSA-2006:041)	Nessus	Mandriva Local Security Checks	2006/2/19	2021/1/6	medium
22856	Debian DSA-990-1 : bluez-hcidump - programming error	Nessus	Debian Local Security Checks	2006/10/14	2021/1/4	medium
21064	Ubuntu 4.10 / 5.04 / 5.10 : bluez-hcidump vulnerability (USN-256-1)	Nessus	Ubuntu Local Security Checks	2006/3/13	2021/1/19	medium
217029	Linux Distros Unpatched Vulnerability : CVE-2006-0670	Nessus	Misc.	2025/3/3	2026/1/28	high

检测

插件搜索

high

high

high

medium

medium

medium

high