The vulnerability of the SDP server for Bluetooth protocol implementations allows a hacker to disclose sensitive system information.

The vulnerability of the SDP-server of the BlueZ software package, which implements a Bluetooth protocol stack, stems from the possibility of reading data beyond the memory buffer boundaries. Exploiting this vulnerability allows a malicious actor to read memory bits by using a specially crafted...

The vulnerability of the L2CAP component of the Bluetooth protocol implementation allows a hacker to execute arbitrary code.

The vulnerability of the L2CAP component of the BlueZ software suite, which implements Bluetooth protocols, is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to control the size of the buffer and execute arbitrary code...

Debian DSA-3972-1 : bluez - security update (BlueBorne)

An information disclosure vulnerability was discovered in the Service Discovery Protocol SDP in bluetoothd, allowing a proximate attacker to obtain sensitive information from bluetoothd process memory, including Bluetooth encryption keys. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Fedora Update for bluez FEDORA-2017-fe95a5b88b

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for bluez CESA-2017:2685 centos7

Check the version of bluez SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882767";...

Fedora 26 : bluez (2017-fe95a5b88b) (BlueBorne)

Security fix for CVE-2017-1000250 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

[SECURITY] Fedora 26 Update: bluez-5.46-6.fc26

Utilities for use in Bluetooth applications: - hcitool - hciattach - hciconfig - bluetoothd - l2ping - rfcomm - sdptool - bccmd - bluetoothctl - btmon - hcidump - l2test - rctest - gatttool - start scripts Red Hat - pcmcia configuration files The BLUETOOTH trademarks are owned by Bluetooth SIG,...

[SECURITY] [DSA 3972-1] bluez security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3972-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3972-1] bluez security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3972-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 13, 2017 https://www.debian.org/security/faq -...

Linux BlueZ SDP Server Information Disclosure Vulnerability

BlueZ is an official Bluetooth stack for Linux, SDP server is one of the SDP servers. An information disclosure vulnerability exists in the Linux BlueZ SDP server. An information disclosure vulnerability exists in the SDP search attribute request processing of the SDP server in BlueZ 5.46 and...

Oracle Linux 6 / 7 : bluez (ELSA-2017-2685)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2685 advisory. 4.66-2 - sdpd heap fixes Resolves: 1490008 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

RedHat Update for bluez RHSA-2017:2685-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux BlueZ Buffer Overflow Vulnerability

BlueZ is an official Bluetooth stack for Linux. A buffer overflow vulnerability in Linux BlueZ 3.3-rc1 and later allows an attacker to overflow a 64-byte buffer in the kernel stack and craft unlimited data to match a valid L2CAP response, due to the l2capparseconfrsp function failing to properly...

DSA-3972-1 bluez - security update

Bulletin has no description...

CentOS Update for bluez CESA-2017:2685 centos6

Check the version of bluez SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882765";...

Ubuntu 14.04 LTS / 16.04 LTS : BlueZ vulnerability (USN-3413-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3413-1 advisory. It was discovered that an information disclosure vulnerability existed in the Service Discovery Protocol SDP implementation in BlueZ. A physically...

bluez security update

4.66-2 - sdpd heap fixes Resolves: 1490008...

RHEL 6 / 7 : bluez (RHSA-2017:2685)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2685 advisory. The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start...

CentOS 6 / 7 : bluez (CESA-2017:2685) (BlueBorne)

An update for bluez is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

Ubuntu: Security Advisory (USN-3413-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...