# CVEs published 2016-12-03

9 CVEs were published on December 3, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-9796](https://cve.now/CVE-2016-9796.md): Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30 (no CVSS)
- [CVE-2016-9797](https://cve.now/CVE-2016-9797.md): In BlueZ 5.42, a buffer over-read was observed in "l2cap\_dump" function in "tools/parser/l2cap.c" source file. (no CVSS)
- [CVE-2016-9798](https://cve.now/CVE-2016-9798.md): In BlueZ 5.42, a use-after-free was identified in "conf\_opt" function in "tools/parser/l2cap.c" source file. (no CVSS)
- [CVE-2016-9799](https://cve.now/CVE-2016-9799.md): In BlueZ 5.42, a buffer overflow was observed in "pklg\_read\_hci" function in "btsnoop.c" source file. (no CVSS)
- [CVE-2016-9800](https://cve.now/CVE-2016-9800.md): In BlueZ 5.42, a buffer overflow was observed in "pin\_code\_reply\_dump" function in "tools/parser/hci.c" source file. (no CVSS)
- [CVE-2016-9801](https://cve.now/CVE-2016-9801.md): In BlueZ 5.42, a buffer overflow was observed in "set\_ext\_ctrl" function in "tools/parser/l2cap.c" source file when processing corrupted dum (no CVSS)
- [CVE-2016-9802](https://cve.now/CVE-2016-9802.md): In BlueZ 5.42, a buffer over-read was identified in "l2cap\_packet" function in "monitor/packet.c" source file. (no CVSS)
- [CVE-2016-9803](https://cve.now/CVE-2016-9803.md): In BlueZ 5.42, an out-of-bounds read was observed in "le\_meta\_ev\_dump" function in "tools/parser/hci.c" source file. (no CVSS)
- [CVE-2016-9804](https://cve.now/CVE-2016-9804.md): In BlueZ 5.42, a buffer overflow was observed in "commands\_dump" function in "tools/parser/csr.c" source file. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-12-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.