CVE-2021-0129

Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access...

CVE-2020-26558

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing in the Passkey authentication procedure by reflection of the public key and the authentication evidence of the initiati...

PT-2021-7064 · Bluez +4 · Bluez +4

Name of the Vulnerable Software and Affected Versions: BlueZ version 5.61 Description: A use-after-free issue can occur in the gatt-database.c file when a client disconnects during D-Bus processing of a WriteValue call, potentially allowing a remote attacker to access confidential information...

PT-2021-7316 · Linux +5 · Bluez +5

Name of the Vulnerable Software and Affected Versions: bluez versions prior to 5.63 Description: A heap overflow vulnerability was found in the implementation of the GATT protocol stack for Linux BlueZ. This issue is related to a buffer overflow. An attacker with local network access could pass...

BlueZ Advisory

Summary: Potential security vulnerabilities in BlueZ may allow information disclosure. BlueZ is releasing Linux kernel Bluetooth subsystem updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0129 Description: Improper access control in BlueZ may allow an...

PT-2021-4255 · Bluez +7 · Bluez +7

Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: The issue is related to improper access control in BlueZ, which may allow an authenticated user to potentially enable information disclosure via adjacent access. This is due to incorrect...

CVE-2020-26558

A vulnerability was found in the bluez, where Passkey Entry protocol used in Secure Simple Pairing SSP, Secure Connections SC and LE Secure Connections LESC of the Bluetooth Core Specification is vulnerable to an impersonation attack where an active attacker can impersonate the initiating device...

Oracle Linux 8 : bluez (ELSA-2021-1598)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1598 advisory. 5.52-4 + bluez-5.52-4 - Fixing 1885378 5.52-3 + bluez-5.52-3 - Revering the 5.52-2 patch due some mismatch with upsream patch. 5.52-2 + bluez-5.52-2 - Fixing...

bluez security update

5.52-4 + bluez-5.52-4 - Fixing 1885378 5.52-3 + bluez-5.52-3 - Revering the 5.52-2 patch due some mismatch with upsream patch. 5.52-2 + bluez-5.52-2 - Fixing 1885378 5.52-1 + bluez-5.52-1 - Fixing 1830397...

CentOS 8 : bluez (CESA-2021:1598)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1598 advisory. - bluez: double free in gatttool client disconnect callback handler in src/shared/att.c could lead to DoS or RCE CVE-2020-27153 Note that Nessus has not tested...

RHEL 8 : bluez (RHSA-2021:1598)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1598 advisory. The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start script...

Moderate: Red Hat Security Advisory: bluez security update

An update for bluez is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

bluez security update

An update is available for bluez. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The bluez packages contain the following utilities for use in Bluetooth...

Moderate: bluez security update

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts AlmaLinux, and pcmcia configuration files. Security Fixes: bluez: double free in gatttool client disconnect callback handler in src/shared/att.c...

RLSA-2021:1598 Moderate: bluez security update

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts Rocky Enterprise Software Foundation, and pcmcia configuration files. Security Fixes: bluez: double free in gatttool client disconnect callback...

ALSA-2021:1598 Moderate: bluez security update

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts AlmaLinux, and pcmcia configuration files. Security Fixes: bluez: double free in gatttool client disconnect callback handler in src/shared/att.c...

SUSE: Security Advisory (SUSE-SU-2018:1778-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:4188-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:1339-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2780-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...