SUSE CVE-2021-41229

BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdpcstateallocbuf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object...

SUSE CVE-2021-43400

An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D-Bus processing of a WriteValue call...

SUSE CVE-2022-0204

A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service...

SUSE CVE-2022-3563

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...

SUSE CVE-2022-3637

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlinkinit of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier of...

SUSE CVE-2022-39176

BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate paramslen...

SUSE CVE-2022-39177

BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c...

SUSE: Security Advisory (SUSE-SU-2023:0167-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0156-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0166-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0155-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : bluez (SUSE-SU-2023:0168-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0168-1 advisory. - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information...

SUSE SLES15 Security Update : bluez (SUSE-SU-2023:0156-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0156-1 advisory. - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information...

SUSE SLES15 Security Update : bluez (SUSE-SU-2023:0155-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0155-1 advisory. - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information...

SUSE SLED12 / SLES12 Security Update : bluez (SUSE-SU-2023:0166-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0166-1 advisory. - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain...

SUSE SLED15: bluez / bluez-auto-enable-devices / bluez-cups / bluez-deprecated / etc (SUSE-SU-2023:0167-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0167-1 advisory. - CVE-2022-3563: Fixed a potential crash in the mgmt-tester tool bsc1204426. Tenable has extracted the...

SUSE-SU-2023:0168-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information bsc1203121. - CVE-2022-39177: Fixed a memory safety issue that could allow physically proximate attackers to cause a deni...

SUSE-SU-2023:0167-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2022-3563: Fixed a potential crash in the mgmt-tester tool bsc1204426...

SUSE-SU-2023:0166-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information bsc1203121. - CVE-2022-39177: Fixed a memory safety issue that could allow physically proximate attackers to cause a deni...

SUSE-SU-2023:0156-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information bsc1203121. - CVE-2022-39177: Fixed a memory safety issue that could allow physically proximate attackers to cause a deni...