2018 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000361)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000361 advisory. Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access. Tenable has extracted the...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000330)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000330 advisory. Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. Tenable has extracted the...
ROOT-OS-DEBIAN-13-CVE-2023-51596 CVE-2023-51596 in rootio-bluez - Patched by Root
Root has patched CVE-2023-51596 in the rootio-bluez package for Root:Debian:13. Multiple fixed versions available...
The vulnerability of the Audio Profile AVRCP component of the Bluetooth protocol stack for the Linux BlueZ operating system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Audio Profile AVRCP component in the Bluetooth protocol stack for the Linux BlueZ operating system is related to reading data beyond the allowed range. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability in the implementation of the OBEX protocol for Bluetooth on the Linux BlueZ operating system allows a hacker to cause a service failure.
The vulnerability of the OBEX protocol implementation in the Bluetooth protocol stack for the Linux BlueZ operating system is related to reading data outside of the allowed range. Exploiting this vulnerability could allow a malicious actor to gain access to protected information remotely...
The vulnerability in the implementation of the AVRCP protocol of the Bluetooth protocol stack for the Linux BlueZ operating system allows a hacker to circumvent existing security restrictions.
The vulnerability of the AVRCP protocol implementation in the Bluetooth protocol stack for the Linux BlueZ operating system is related to reading data beyond the buffer limits of memory. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions using a...
The vulnerability in the implementation of the AVRCP protocol of the Bluetooth protocol stack for the Linux BlueZ operating system allows a hacker to circumvent existing security restrictions.
The vulnerability of the AVRCP protocol implementation in the Bluetooth protocol stack for the Linux BlueZ operating system is related to reading data beyond the buffer limits of memory. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions using a...
The vulnerability of the `processUnsolicitedReply()` and `processReply()` functions in the `bluetooth/qlowenergycontroller_bluez.cpp` file of the cross-platform framework for Qt software development allows a attacker to execute arbitrary code.
The vulnerability of the processUnsolicitedReply and processReply functions in the bluetooth/qlowenergycontrollerbluez.cpp file of the cross-platform framework for Qt software development relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could...
EUVD-2025-201571
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: cancel mesh send timer when hdev removed meshsenddone timer is not canceled when hdev is removed, which causes crash if the timer triggers after hdev is gone. Cancel the timer when MGMT removes the hdev, like oth...
CVE-2025-40284
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: cancel mesh send timer when hdev removed meshsenddone timer is not canceled when hdev is removed, which causes crash if the timer triggers after hdev is gone. Cancel the timer when MGMT removes the hdev, like oth...
ROS-20251125-01
A vulnerability in the cross-platform software development framework Qt is related to a bug in the data boundary checking when reading data from Bluetooth L2CAP socket in processUnsolicitedReply and processReply in bluetooth/qlowenergycontrollerbluez.cpp. Exploitation of the vulnerability could...
TencentOS Server 4: bluez (TSSA-2024:0357)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0357 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CLSA-2025-1763031616 bluez: Fix of 10 CVEs
CVE-2023-27349: fix crash while handling unsupported events in avrcp - CVE-2023-44431: fix Stack-based buffer overflow and remote code execution vulnerability - CVE-2023-45866: restrict HID connections to avoid unauthorized input injection - CVE-2023-50229: fix heap-based buffer overflow...
NewStart CGSL MAIN 7.02 : kernel-modules-sub Multiple Vulnerabilities (NS-SA-2025-0250)
The remote NewStart CGSL host, running version MAIN 7.02, has kernel-modules-sub packages installed that are affected by multiple vulnerabilities: - BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to...
SUSE SLES12 Security Update : bluez (SUSE-SU-2025:03590-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:03590-1 advisory. - CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections bsc1217877. Tenable has extracted the preceding...
Security update for bluez
This update for bluez fixes the following issues: CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections bsc1217877. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2025:03590-1 Security update for bluez
This update for bluez fixes the following issues: - CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections bsc1217877...
EUVD-2018-8116
Malware in sbrugna...