Lucene search
+L

54 matches found

Positive Technologies
Positive Technologies
added 2025/02/05 12:00 a.m.11 views

PT-2025-5735

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP affected versions not specified Description: When the BIG-IP APM Access Profile is configured on a virtual server, an undisclosed request can cause the TMM to terminate. Software versions that have reached the End of Technical Suppo...

8.7CVSS6.9AI score0.00408EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2025/02/05 12:00 a.m.12 views

F5 Networks BIG-IP : BIG-IP APM access profile vulnerability (K000141003)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2. It is, therefore, affected by a vulnerability as referenced in the K000141003 advisory. When a BIG-IP APM access profile is configured on a virtual server, undisclosed requests can cause the Traffic...

8.7CVSS6.1AI score0.00408EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/22 2:41 p.m.15 views

USN-7222-1 bluez vulnerabilities

Lucas Leong discovered that BlueZ incorrectly handled the Phone Book Access profile. If a user were tricked into connecting to a malicious Bluetooth device, a remote attacker could possibly use this issue to execute arbitrary code...

8CVSS7.1AI score0.0229EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2024/11/12 9:20 a.m.11 views

bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability

A flaw was found within the handling of the Phone Book Access profile in BlueZ. In certain conditions, a network-adjacent attacker can execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicio...

7.1CVSS6AI score0.01493EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2024/05/03 3:16 a.m.55 views

CVE-2023-51596

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.6AI score0.01493EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/05/03 2:15 a.m.41 views

CVE-2023-51596 BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.7AI score0.01493EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2024/05/03 2:14 a.m.29 views

CVE-2023-50229

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

8CVSS7.5AI score0.0229EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.32 views

openSUSE: Security Advisory for bluez (SUSE-SU-2024:0204-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8CVSS6.9AI score0.0229EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.21 views

openSUSE Security Advisory (SUSE-SU-2024:0183-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8CVSS7.2AI score0.0229EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.40 views

openSUSE: Security Advisory for bluez (SUSE-SU-2024:0182-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8CVSS6.9AI score0.0229EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/01/25 12:00 a.m.34 views

SUSE: Security Advisory (SUSE-SU-2024:0204-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8CVSS7.2AI score0.0229EPSS
SaveExploits0References5
OSV
OSV
added 2024/01/24 12:34 p.m.12 views

SUSE-SU-2024:0204-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation bsc1218300. - CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access...

8CVSS6.8AI score0.0229EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2024/01/24 12:00 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2024:0182-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8CVSS7.2AI score0.0229EPSS
SaveExploits0References5
OSV
OSV
added 2024/01/23 11:33 a.m.10 views

SUSE-SU-2024:0183-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation bsc1218300. - CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access...

8CVSS6.8AI score0.0229EPSS
SaveExploits0References5
OSV
OSV
added 2024/01/23 11:04 a.m.10 views

SUSE-SU-2024:0182-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation bsc1218300. - CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access...

8CVSS6.8AI score0.0229EPSS
SaveExploits0References5
OSV
OSV
added 2024/01/19 2:00 p.m.9 views

SUSE-SU-2024:0167-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache bsc1192760. - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation bsc1218300. - CVE-2023-50230: Fixed an out of...

8CVSS6.8AI score0.0229EPSS
SaveExploits1References7
OSV
OSV
added 2024/01/19 1:59 p.m.9 views

SUSE-SU-2024:0166-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache bsc1192760. - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation bsc1218300. - CVE-2023-50230: Fixed an out of...

8CVSS6.8AI score0.0229EPSS
SaveExploits1References7
OSV
OSV
added 2024/01/05 11:06 a.m.8 views

OESA-2024-1019 bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: VUL-0: CVE-2023-50230: bluez: BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2023-50230...

7.1CVSS7.6AI score0.01493EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.32 views

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device. The specific flaw exists within the handling of the Phone...

7.1CVSS7.3AI score0.0229EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/04/26 12:00 a.m.8 views

PT-2023-9090 · Bluez +8 · Bluez +8

Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this issue, where the target must connect to...

9.1CVSS7.1AI score0.07879EPSS
SaveExploits11References125
Rows per page
Query Builder