SUSE SLES15 Security Update : bluez (SUSE-SU-2024:0166-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0166-1 advisory. - CVE-2021-41229: Fix leaking buffers stored in cstates cache bsc1192760. - CVE-2023-50229: Fixed an out of bounds write in the...

SUSE SLES15 Security Update : bluez (SUSE-SU-2024:0167-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0167-1 advisory. - CVE-2021-41229: Fix leaking buffers stored in cstates cache bsc1192760. - CVE-2023-50229: Fixed an out of bounds write in the...

SUSE-SU-2024:0167-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache bsc1192760. - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation bsc1218300. - CVE-2023-50230: Fixed an out of...

SUSE-SU-2024:0166-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache bsc1192760. - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation bsc1218300. - CVE-2023-50230: Fixed an out of...

EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2023-3393)

According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access...

CVE-2023-45866 affecting package bluez for versions less than 5.63-5

CVE-2023-45866 affecting package bluez for versions less than 5.63-5. A patched version of the package is available...

OESA-2024-1056 bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: VUL-0: CVE-2023-50230: bluez: BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2023-50230...

OESA-2024-1029 bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: VUL-0: CVE-2023-50229: bluez: BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2023-50229...

Important: bluez

Issue Overview: bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 Affected Packages: bluez Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL...

Amazon Linux 2 : bluez (ALAS-2024-2386)

The version of bluez installed on the remote host is prior to 5.44-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2386 advisory. bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 Tenable has...

Amazon Linux 2023 : bluez, bluez-cups, bluez-deprecated (ALAS2023-2024-473)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-473 advisory. bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 Tenable has extracted the preceding description block directly from the tested produ...

Important: bluez

Issue Overview: bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 Affected Packages: bluez Issue Correction: Run dnf update bluez --releasever 2023.3.20240108 or dnf update --advisory ALAS2023-2024-473 --releasever 2023.3.2024010...

Important Photon OS Security Update - PHSA-2024-4.0-0542

Updates of 'net-snmp', 'libssh', 'bluez', 'python3-paramiko' packages of Photon OS have been released...

Important: bluez

Issue Overview: bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 Affected Packages: bluez Issue Correction: Run dnf update bluez --releasever 2023.3.20240108 to update your system. New Packages: aarch64: ...

OESA-2024-1019 bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: VUL-0: CVE-2023-50230: bluez: BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2023-50230...

GLSA-202401-03 : BlueZ: Privilege Escalation

The remote host is affected by the vulnerability described in GLSA-202401-03 BlueZ: Privilege Escalation - Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitti...

BlueZ: Privilege Escalation

Background BlueZ is the canonical bluetooth tools and system daemons package for Linux. Description Multiple vulnerabilities have been discovered in BlueZ. Please review the CVE identifiers referenced below for details. Impact An attacker may inject unauthenticated keystrokes via Bluetooth, leadi...

Moderate Photon OS Security Update - PHSA-2024-3.0-0708

Updates of 'libtiff', 'bluez' packages of Photon OS have been released...

SUSE CVE-2023-51589

BlueZ Audio Profile AVRCP parsemediaelement Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability ...

SUSE CVE-2023-51580

BlueZ Audio Profile AVRCP avrcpparseattributelist Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this...