BlueBorn

BlueBorn CVE-2017-0785 Archlinux インストール paru -S python-pybluez-git bluez-utils-compat pyhton3 python3-pip sudo pip install pwn チュートリアル 発見 hcitool scan Scanning ... XX:XX:XX:XX:XX:XX Device 1 XX:XX:XX:XX:XX:XX Device 2 エクスプロイトの使用 python CVE-2017-0785.py TARGET=XX:XX:XX:XX:XX V エクスプロイト: 完了! python...

bluez

BlueZ - Linux 蓝牙协议栈 版权所有 C 2000-2001 Qualcomm Incorporated 版权所有 C 2002-2003 Maxim Krasnyansky [email protected] 版权所有 C 2002-2010 Marcel Holtmann [email protected] 编译与安装 为了编译蓝牙工具，你需要以下软件包： - GCC 编译器 - GLib 库 - D-Bus 库 - udev 库（可选） - readline（命令行客户端） 在基于 Debian 的系统上，可以通过运行以下命令来完成： sudo...

Bluepop

Bluepop CVE-2023-45866 安装和使用 🛠️ 设置 sudo apt-get update sudo apt-get -y upgrade sudo apt install -y bluez-tools bluez-hcidump libbluetooth-dev \ git gcc python3-pip python3-setuptools \ python3-pydbus git clone https://github.com/pybluez/pybluez.git cd pybluez sudo python3 setup.py install cd / git...

BLESuite-CLI

BLESuiteCLI 自述文件 BLESuiteCLI 是一个命令行工具，提供了一种更简便的方式来测试低功耗蓝牙（BLE）设备。该工具使用 BLESuite Python 库，该库利用 pygattlib 和 Bluez 蓝牙协议栈，使我们能够通过属性协议（ATT）上的通用属性配置文件（GATT）对 BLE 设备进行扫描、读取和写入。该工具的目标是创建 Bluez gatttool 的替代方案，gatttool 通常用于通过 GATT/ATT 协议与 BLE 设备通信。 功能： 命令行工具和独立的 Python 包 扫描 BTLE 设备 扫描 BTLE 设备的主要服务和特征...

bluing

Bluing Bluetoothハッキングのためのインテリジェンス収集ツール 英語 · 简体中文 %20%7C%20Kali%202022.4%20\x64%20%7C%20Kali%20NetHunter%202022.4%20\aarch64-brightgreen Bluing（旧称bluescan）は、主にPythonで書かれたBlu etooth In telligence G atheringツールです。複雑なプロトコルであるBluetoothの内部構造を覗き見たり、Bluetoothデバイスをハッキングするのに役立ちます。以下が主な機能です： インストール...

Blue-Borne

Blue-Borne BlueBorne Exploits & Framework Este repositorio contiene código PoC de varios exploits para las vulnerabilidades BlueBorne. En la carpeta 'android' se pueden encontrar exploits para la vulnerabilidad RCE de Android CVE-2017-0781 y la vulnerabilidad de fuga de información SDP...

AlmaLinux 9.2 [TuxCare] Security Update: bluez / bluez-cups / bluez-hid2hci / bluez-libs / bluez-libs-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1755113613)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1755113613 advisory. - BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows...

Rocky Linux 8 [CIQ] Security Update: bluez / bluez-cups / bluez-cups-debuginfo / bluez-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_4043)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20254043 advisory. BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability CVE-2023-27349 bluez: audio profile avrcp parsemediaeleme...

AlmaLinux 9.2 [TuxCare] Security Update: bluez / bluez-cups / bluez-hid2hci / bluez-libs / bluez-libs-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1763031616)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1763031616 advisory. - BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows...

Rocky Linux 8 [CIQ] Security Update: bluez / bluez-cups / bluez-cups-debuginfo / bluez-debuginfo / etc (crlsa-2021_1598)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20211598 advisory. bluez: double free in gatttool client disconnect callback handler in src/shared/att.c could lead to DoS or RCE CVE-2020-27153 Tenable has extracted the preceding...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1782146775)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1782146775 advisory. - Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists. CVE-2019-102...

Rocky Linux 9 [CIQ] Security Update: bluez / bluez-cups / bluez-cups-debuginfo / bluez-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_9413)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249413 advisory. bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 BlueZ: Audio Profile AVRCP Improper...

CentOS Linux 7 [TuxCare] Security Update: bluez / bluez-cups / bluez-hid2hci / bluez-libs / bluez-libs-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1777541445)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1777541445 advisory. - A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially...

Rocky Linux 8.6 [CIQ] Security Update: bluez / bluez-cups / bluez-cups-debuginfo / bluez-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0008)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260008 advisory. This advisory aggregates security fixes for the bluez SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2021-41229, CVE-2022-39176, CVE-2022-39177. Tenable h...

CentOS Linux 7 [TuxCare] Security Update: bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1720468480)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1720468480 advisory. - In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure only...

AlmaLinux 9.2 [TuxCare] Security Update: bluez / bluez-cups / bluez-hid2hci / bluez-libs / bluez-libs-devel / etc (ALMALINUX9.2:CLSA-2025:1754939879)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1754939879 advisory. - BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacen...

Linux-Heap-Based-Type-Confusion-in-L2CAP

Linux: L2CAPにおけるヒープベースの型混同 CVE-2020-12351 Linux: L2CAPにおけるヒープベースの型混同 BLE実装向けPoC CVE-2020-12351 なぜ元のPoCを修正したのか？ 元のPoCは、Bluetooth Classicを介した悪意のあるL2CAPパケットの送信に焦点を当てています。しかし、私はBluetooth Low Energy BLE通信のみをサポートし、BlueZスタック全体（ClassicとLEの両方）を採用しているペリフェラルに対してテストする必要がありました。 L2CAPは、Bluetooth...

ROOT-OS-ALPINE-318-CVE-2023-50229 CVE-2023-50229 in bluez - Patched by Root

Root has patched CVE-2023-50229 in the bluez package for Root:Alpine:3.18. Multiple fixed versions available...

ROOT-OS-ALPINE-317-CVE-2023-50230 CVE-2023-50230 in bluez - Patched by Root

Root has patched CVE-2023-50230 in the bluez package for Root:Alpine:3.17. Multiple fixed versions available...

Amazon Linux 2023 : bluez, bluez-cups, bluez-deprecated (ALAS2023-2026-3141)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3141 advisory. BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacke...