1732 matches found
PT-2023-9090 · Bluez +8 · Bluez +8
Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this issue, where the target must connect to...
Critical Photon OS Security Update - PHSA-2023-4.0-0380
Updates of 'libyang', 'libxml2', 'redis', 'vim', 'bluez' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2023-3.0-0570
Updates of 'redis', 'bluez' packages of Photon OS have been released...
OESA-2023-1249 bluez security update
This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: CVE-2023-27349...
SUSE CVE-2023-27349
BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the...
PT-2023-9086 · Bluez +4 · Bluez +4
Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: The issue is related to a stack-based buffer overflow in the Audio Profile AVRCP component of the BlueZ Bluetooth protocol stack for Linux. This allows network-adjacent attackers to execute...
CVE-2022-3637
A flaw was found in the Linux Kernel, affecting the jlinkinit function of the monitor/jlink.c file in the BlueZ component. Manipulation leads to a denial of service...
PT-2023-8670 · Bluez +9 · Bluez +9
Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: The issue is related to the improper validation of array indexes in the AVRCP protocol handling of BlueZ, which can result in a write past the end of an allocated buffer. This allows...
Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2023-1491)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : bluez (EulerOS-SA-2023-1491)
According to the versions of the bluez packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate paramsle...
K63131370: Linux kernel vulnerability CVE-2017-1000251
Security Advisory Description The native Bluetooth stack in the Linux Kernel BlueZ, starting at the Linux kernel version 3.3-rc1 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution i...
K92327553: BlueZ and Intel Smart Sound Technology vulnerabilities CVE-2020-0556 and CVE-2020-0583
Security Advisory Description CVE-2020-0556 Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access CVE-2020-0583 Improper access control in the subsystem for Intel...
SUSE CVE-2005-0750
The bluezsockcreate function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via 1 socket or 2 socketpair call with a negative protocol value...
SUSE CVE-2005-2547
security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper...
SUSE CVE-2006-6899
hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack...
SUSE CVE-2008-2374
src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field th...
SUSE CVE-2016-7837
Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parseline function used in some userland utilities...
SUSE CVE-2016-9798
In BlueZ 5.42, a use-after-free was identified in "confopt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...
SUSE CVE-2016-9797
In BlueZ 5.42, a buffer over-read was observed in "l2capdump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash...