1732 matches found
SUSE-SU-2023:0155-1 Security update for bluez
This update for bluez fixes the following issues: - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information bsc1203121. - CVE-2022-39177: Fixed a memory safety issue that could allow physically proximate attackers to cause a deni...
EulerOS 2.0 SP5 : bluez (EulerOS-SA-2022-1263)
According to the versions of the bluez packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the...
Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2023-1090)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.2.6 : bluez (EulerOS-SA-2023-1090)
According to the versions of the bluez package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP...
Denial Of Service (DoS)
bluez-firmware is vulnerable to denial of service DoS attacks. The library does not properly handle the reception of continuous unsolicited LMP responses, allowing an attacker in radio range to trigger a denial of service and restart the device by flooding it with LMPAURand packets after the pagi...
Denial Of Service (DoS)
bluez-firmware is vulnerable to denial of service DoS attacks. The library does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple reconnections to the link slave, allowing an attacker to exhaust device BT resources and eventually trigger a crash vi...
Denial Of Service (DoS)
bluez-firmware is vulnerable to denial of service DoS attacks. The library does not properly handle the reception of LMPmaxslot with a greater ACL length after completion of the LMP setup procedure, allowing an attacker in radio range to trigger a denial of service via a crafted LMP packet...
ROS-20221220-01
A vulnerability in the ath9khtcwaitfortarget function of the Atheros wireless adapter driver of the kernel of the operating system Linux kernel is associated with a post-release usage error. Exploitation of the vulnerability could allow an attacker to access kernel memory by typing a specially...
Amazon Linux 2 : bluez (ALAS-2022-1881)
The version of bluez installed on the remote host is prior to 5.44-7. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1881 advisory. 2023-06-07: CVE-2022-39177 was added to this advisory. A vulnerability was found in BlueZ. This flaw allows physically...
Important: bluez
Issue Overview: 2023-06-07: CVE-2022-39177 was added to this advisory. A vulnerability was found in BlueZ. This flaw allows physically proximate attackers to cause a denial of service due to malformed and invalid capabilities processed in profiles/audio/avdtp.c. CVE-2022-39177 A vulnerability was...
CVE-2022-3563
A vulnerability has been found in BlueZ. This issue affects the read50controllercapcomplete function of the tools/mgmt-tester.c file in the BlueZ component. A manipulation of the caplen argument leads to null pointer dereference...
Denial Of Service (DoS)
bluez is vulnerable to denial of service. The vulnerability exists in function jlinkinit of the file monitor/jlink.c which allows an attacker to cause an application crash...
Null Pointer Dereference
bluez is vulnerable to null pointer dereference. The vulnerability exists due to the manipulation of the argument caplen in read50controllercapcomplete of the file tools/mgmt-tester.c which causes a null pointer dereference resulting in an application crash...
SUSE SLED15: bluez / bluez-auto-enable-devices / bluez-cups / bluez-deprecated / etc (SUSE-SU-2022:3981-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3981-1 advisory. - CVE-2021-43400: Fixed use-after-free in gatt-database.c bsc1192394. - CVE-2021-3658: Fixed...
SUSE: Security Advisory (SUSE-SU-2022:3981-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:3981-1 Security update for bluez
This update for bluez fixes the following issues: - CVE-2021-43400: Fixed use-after-free in gatt-database.c bsc1192394. - CVE-2021-3658: Fixed adapter incorrectly restoring discoverable state after powered down bsc1188859...
bluez bug fix and enhancement update
An update is available for bluez. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.1...
OESA-2022-2047 bluez security update
This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D-Bus processing of a...
Mageia: Security Advisory (MGASA-2022-0411)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...