CVE-2016-0830

Publication date 12 March 2016

Last updated 25 August 2025

Ubuntu priority

Cvss 3 Severity Score

Description

btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and persistent daemon crash) by triggering a large number of configuration entries, and consequently exceeding the maximum size of a configuration file, aka internal bug 26071376.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
android	18.04 LTS bionic	Not in release
	17.10 artful	Not in release
	17.04 zesty	Fixed 20160307-0742-0ubuntu3
	16.10 yakkety	Fixed 20160307-0742-0ubuntu3
	16.04 LTS xenial	Fixed 20160307-0742-0ubuntu3
	15.10 wily	Ignored end of life
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
android	Upstream: https://android.googlesource.com/platform/system/bt/+/d77f1999ecece56c1cbb333f4ddc26f0b5bac2c5

Severity score breakdown

Parameter	Value
Base score	6.5 · Medium
Attack vector	Adjacent
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H