1757 matches found
USN-4519-1 pulseaudio vulnerability
Ratchanan Srirattanamet discovered that an Ubuntu-specific patch caused PulseAudio to incorrectly handle memory under certain error conditions in the Bluez 5 module. An attacker could use this issue to cause PulseAudio to crash, resulting in a denial of service, or possibly execute arbitrary code...
CVE-2020-15710
Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...
UBUNTU-CVE-2020-15710
Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...
Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2020-1837)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Bluescan - A Powerful Bluetooth Scanner For Scanning BR/LE Devices, LMP, SDP, GATT And Vulnerabilities!
Bluescan is a open source project by Sourcell Xu from DBAPP Security HatLab. Anyone may redistribute copies of bluescan to anyone under the terms stated in the GPL-3.0 license. This document is also available in Chinese. See README-Chinese.md Aren't the previous Bluetooth scanning tools scattered...
EulerOS 2.0 SP8 : bluez (EulerOS-SA-2020-1837)
According to the version of the bluez packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege a...
Improper Access Control
Improper access control in subsystem for BlueZ allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access...
bluescan
This is a Python script for a Bluetooth scanner, specifically designed to scan for devices, services, and vulnerabilities. The script is called "bluescan" and is available on GitHub. The script is based on the BlueZ Bluetooth protocol stack and uses the libbluetooth-dev package. It can be install...
openSUSE Security Update : bluez (openSUSE-2020-872)
This update for bluez fixes the following issues : - CVE-2020-0556: Fixed an improper access control which could have allowed an unauthenticated user to potentially enable escalation of privilege and denial of service bsc1166751. This update was imported from the SUSE:SLE-15:Update update project...
EulerOS Virtualization 3.0.6.0 : bluez (EulerOS-SA-2020-1725)
According to the version of the bluez package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation ...
openSUSE: Security Advisory for bluez (openSUSE-SU-2020:0872-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2020:0872-1 Security update for bluez
This update for bluez fixes the following issues: - CVE-2020-0556: Fixed an improper access control which could have allowed an unauthenticated user to potentially enable escalation of privilege and denial of service bsc1166751. This update was imported from the SUSE:SLE-15:Update update project...
Security update for bluez (moderate)
openSUSE Security Update: Security update for bluez Announcement ID: openSUSE-SU-2020:0872-1 Rating: moderate References: 1166751 Cross-References: CVE-2020-0556 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for bluez fixes...
Debian DLA-2240-1 : bluez security update
It was reported that the BlueZ's HID and HOGP profile implementations don't specifically require bonding between the device and the host. Malicious devices can take advantage of this flaw to connect to a target host and impersonate an existing HID device without security or to cause an SDP or GAT...
Debian: Security Advisory (DLA-2240-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2240-1] bluez security update
Package : bluez Version : 5.43-2+deb9u2deb8u1 CVE ID : CVE-2020-0556 Debian Bug : 953770 It was reported that the BlueZs HID and HOGP profile implementations dont specifically require bonding between the device and the host. Malicious devices can take advantage of this flaw to connect to a target...
DLA-2240-1 bluez - security update
Bulletin has no description...
Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2020-1594)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : bluez (EulerOS-SA-2020-1594)
According to the version of the bluez packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege a...