1732 matches found
The vulnerability in the profiles/audio/avrcp.c component of the BlueZ software package allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the profiles/audio/avrcp.c component in the BlueZ software package is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protecte...
The vulnerability of the profiles/audio/avdtp.c component in the BlueZ software package allows a hacker to cause a service failure or exert other effects.
The vulnerability of the profiles/audio/avdtp.c component in the BlueZ software package is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects...
The vulnerability of the `read_50_controller_cap_complete` function in the BlueZ component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the read50controllercapcomplete function in the BlueZ component of the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2022-0204
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service...
Oracle Linux 8 : bluez (ELSA-2020-1912)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1912 advisory. 5.50-3 + bluez-5.50-3 - Bump the version 5.50-2 + bluez-5.50-2 - Fixing CVE-2018-10910 1606373 Tenable has extracted the preceding description block directly fr...
Oracle Linux 7 : ELSA-2017-2679-1: / kernel (ELSA-2017-26791)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-26791 advisory. - The native Bluetooth stack in the Linux Kernel BlueZ, starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack...
Oracle Linux 7 : bluez (ELSA-2020-1101)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1101 advisory. 5.44-6 - fixing CVE-2018-10910. Resolves: 1609340 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...
SUSE SLES15 Security Update : bluez (SUSE-SU-2023:3240-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:3240-1 advisory. - CVE-2021-41229: Fix leaking buffers stored in cstates cache. bsc1192760 Tenable has extracted the preceding description block directly from the SUSE...
SUSE SLED15: bluez / bluez-auto-enable-devices / bluez-cups / bluez-deprecated / etc (SUSE-SU-2023:3238-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3238-1 advisory. - CVE-2021-41229: Fix leaking buffers stored in cstates cache. bsc1192760 Tenable has extracted the...
SUSE-SU-2023:3240-1 Security update for bluez
This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache. bsc1192760...
SUSE-SU-2023:3238-1 Security update for bluez
This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache. bsc1192760...
PT-2023-1008
Name of the Vulnerable Software and Affected Versions BlueZ versions prior to the fixed version Android versions prior to 11 Linux versions with vulnerable Bluetooth stacks macOS versions with vulnerable Bluetooth stacks iOS versions with vulnerable Bluetooth stacks Description A critical Bluetoo...
EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2023-2406)
According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not...
Amazon Linux 2 : bluez (ALAS-2023-2167)
The version of bluez installed on the remote host is prior to 5.44-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2167 advisory. A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially...
Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2023-2406)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Medium: bluez
Issue Overview: A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service. CVE-2022-0204 Affected Packages: bluez Note: This advisory ...
Amazon Linux 2023 : bluez, bluez-cups, bluez-deprecated (ALAS2023-2023-262)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-262 advisory. A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of...
Low: bluez
Issue Overview: A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to...
SUSE SLED15: bluez / bluez-auto-enable-devices / bluez-cups / bluez-deprecated / etc (SUSE-SU-2023:2605-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2605-1 advisory. - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398. Tenable has extracted the...