CVE-2022-0204

A heap overflow vulnerability was found in bluez. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service...

Photon OS 3.0: Bluez PHSA-2021-3.0-0346

An update of the bluez package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0346. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

EulerOS Virtualization 3.0.2.6 : bluez (EulerOS-SA-2021-2910)

According to the versions of the bluez package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could...

Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2021-2910)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical Photon OS Security Update - PHSA-2021-0346

Updates of 'bluez', 'consul', 'pkg-config', 'vim', 'httpd' packages of Photon OS have been released...

Denial Of Service (DoS)

BlueZ is vulnerable to denial of service. A use-after-free can occur when a client disconnects during D-Bus processing of a WriteValue call causing an application crash...

Critical Photon OS Security Update - PHSA-2021-3.0-0346

Updates of 'consul', 'vim', 'bluez', 'httpd', 'pkg-config' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-4.0-0139

Updates of 'krb5', 'rubygem-bundler', 'bluez', 'wireshark' packages of Photon OS have been released...

The vulnerability in the implementation of the SDP service for the Bluetooth protocol stack for the Linux BlueZ operating system allows a attacker to disclose protected information.

The vulnerability of the SDP service implementation for the Bluetooth protocol stack for the Linux BlueZ operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

Important Photon OS Security Update - PHSA-2021-0139

Updates of 'wireshark', 'bluez', 'rubygem-bundler', 'krb5' packages of Photon OS have been released...

Information Disclosure

bluez is vulnerable to information disclosure. The vulnerability exists due to the handling of a SVCATTRREQ by the SDP implementation which allows an attacker to inject a malicious CSTATE, tricking the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrary...

Buffer Overflow

bluez is vulnerable to buffer overflow. The vulnerability exists due to the lack of validation on the space in the destination buffer causing an application crash...

Denial Of Service

bluez is vulnerable to denial of service attacks. The vulnerability exists in sdpcstateallocbuf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed eventually causing a memory leak...

The vulnerability of the serviceattrreq and processrequest functions (sdpd-request.c) in the Bluetooth protocol stack for the Linux BlueZ operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the serviceattrreq and processrequest functions sdpd-request.c in the Bluetooth protocol stack for the Linux BlueZ operating system arises from writing beyond buffer boundaries. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality,...

Ubuntu: Security Advisory (USN-5183-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5183-1: BlueZ vulnerability

Julian Rauchberger discovered that BlueZ incorrectly handled memory when processing SDP attribute requests. A remote attacker could use this issue to cause BlueZ to crash, leading to a denial of service, or possibly execute arbitrary code...

USN-5183-1 bluez vulnerability

Julian Rauchberger discovered that BlueZ incorrectly handled memory when processing SDP attribute requests. A remote attacker could use this issue to cause BlueZ to crash, leading to a denial of service, or possibly execute arbitrary code...

Ubuntu 18.04 LTS : BlueZ vulnerability (USN-5183-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5183-1 advisory. Julian Rauchberger discovered that BlueZ incorrectly handled memory when processing SDP attribute requests. A remote attacker could use this issue to cause BlueZ ...

PT-2022-6907 · Bluez +3 · Bluez +3

Name of the Vulnerable Software and Affected Versions: BlueZ versions prior to 5.59 Description: The issue is related to insufficient input validation in the profiles/audio/avdtp.c component of the BlueZ package. This can be exploited by physically proximate attackers to cause a denial of service...

PT-2022-6906 · Bluez +3 · Bluez +3

Name of the Vulnerable Software and Affected Versions: BlueZ versions prior to 5.59 Description: The issue is related to insufficient validation of params len in the profiles/audio/avrcp.c component of BlueZ, allowing physically proximate attackers to obtain sensitive information. This could...