SUSE SLED15 / SLES15 Security Update : bluez (SUSE-SU-2019:0841-1)

This update for bluez fixes the following issues : Security issue fixed : CVE-2016-9918: Fixed a out-of-bound read in the packethexdump function bsc1015173 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE-SU-2019:0841-1 Security update for bluez

This update for bluez fixes the following issues: Security issue fixed: - CVE-2016-9918: Fixed a out-of-bound read in the packethexdump function bsc1015173...

openSUSE Security Update : bluez (openSUSE-2019-1030)

This update for bluez fixes the following issues : Security issues fixed : - CVE-2016-9800: Fixed a buffer overflow in pincodereplydump function bsc1013721 - CVE-2016-9801: Fixed a buffer overflow in setextctrl function bsc1013732 This update was imported from the SUSE:SLE-15:Update update projec...

SUSE SLES12 Security Update : bluez (SUSE-SU-2019:0510-1) (BlueBorne)

This update for bluez fixes the following issues : Security issues fixed : CVE-2016-7837: Fixed possible buffer overflow, make sure we don't write past the end of the array.bsc1026652 CVE-2016-9800: Fix hcidump memory leak in pincodereplydump bsc1013721. CVE-2016-9801: Fixed a buffer overflow in...

SUSE-SU-2019:0510-1 Security update for bluez

This update for bluez fixes the following issues: Security issues fixed: - CVE-2016-7837: Fixed possible buffer overflow, make sure we don't write past the end of the array.bsc1026652 - CVE-2016-9800: Fix hcidump memory leak in pincodereplydump bsc1013721. - CVE-2016-9801: Fixed a buffer overflow...

PT-2019-6138 · Linux +2 · Bluez +2

Name of the Vulnerable Software and Affected Versions: BlueZ versions through 5.48 Description: The issue is related to the implementation of the SDP service in the Bluetooth protocol stack for Linux BlueZ, which is associated with insufficient authentication of data. This can allow a remote...

PT-2019-6134 · Bluez +2 · Bluez +2

Name of the Vulnerable Software and Affected Versions: BlueZ versions through 5.48 Description: A heap-based buffer overflow was discovered in the bluetoothd component of BlueZ. The issue is caused by the lack of size checks when appending data to the output buffer in the service attr req functio...

Updated bluez packages fix security vulnerability

A buffer overflow in pincodereplydump function CVE-2016-9800. A buffer overflow in setextctrl function CVE-2016-9801. A buffer overflow in commandsdump function CVE-2016-9804...

MGASA-2019-0052 Updated bluez packages fix security vulnerability

A buffer overflow in pincodereplydump function CVE-2016-9800. A buffer overflow in setextctrl function CVE-2016-9801. A buffer overflow in commandsdump function CVE-2016-9804...

Authentication flaw

A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable...

CVE-2018-10910

A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable...

CVE-2018-10910

A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable...

DEBIAN-CVE-2018-10910

A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable...

CVE-2018-10910

CVE-2018-10910 affects bluez; a bug can set Bluetooth Discoverable on when no Bluetooth agent is registered, potentially allowing unauthorized pairing. The issue is tied to bluez versions before 5.51 and is discussed across Nessus/OpenVAS/Miracle/Oracle advisories, which note vendor-supplied fixe...

CVE-2018-10910

A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable...

CVE-2018-10910

A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable...

Remote Code Execution (RCE)

kernel is vulnerable to remote code execution RCE attacks. The vulnerability exists as the native Bluetooth stack in the Linux Kernel BlueZ, starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP...

Information Disclosure

bluez is vulnerable to information disclosure attacks. The vulnerability exists as all versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory...

Ubuntu 18.04 LTS : GNOME Bluetooth vulnerability (USN-3856-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3856-1 advisory. Chris Marchesi discovered that BlueZ incorrectly handled disabling Bluetooth visibility. A remote attacker could possibly pair to devices, contrary to expectation...

Ubuntu: Security Advisory (USN-3856-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...