Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference

...

SUSE SLED12 / SLES12 Security Update : bluez (SUSE-SU-2023:3689-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3689-1 advisory. - CVE-2021-41229: Fixed leaking buffers stored in cstates cache bsc1192760. Tenable has extracted the preceding...

SUSE: Security Advisory (SUSE-SU-2023:3689-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:3689-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2021-41229: Fixed leaking buffers stored in cstates cache bsc1192760...

The vulnerability in the profiles/audio/avrcp.c component of the BlueZ software package allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the profiles/audio/avrcp.c component in the BlueZ software package is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protecte...

The vulnerability of the profiles/audio/avdtp.c component in the BlueZ software package allows a hacker to cause a service failure or exert other effects.

The vulnerability of the profiles/audio/avdtp.c component in the BlueZ software package is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects...

The vulnerability of the `read_50_controller_cap_complete` function in the BlueZ component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the read50controllercapcomplete function in the BlueZ component of the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2022-0204

A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service...

Oracle Linux 7 : ELSA-2017-2679-1: / kernel (ELSA-2017-26791)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-26791 advisory. - The native Bluetooth stack in the Linux Kernel BlueZ, starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack...

Oracle Linux 7 : bluez (ELSA-2020-1101)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1101 advisory. 5.44-6 - fixing CVE-2018-10910. Resolves: 1609340 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : bluez (ELSA-2020-1912)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1912 advisory. 5.50-3 + bluez-5.50-3 - Bump the version 5.50-2 + bluez-5.50-2 - Fixing CVE-2018-10910 1606373 Tenable has extracted the preceding description block directly fr...

SUSE SLES15 Security Update : bluez (SUSE-SU-2023:3240-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:3240-1 advisory. - CVE-2021-41229: Fix leaking buffers stored in cstates cache. bsc1192760 Tenable has extracted the preceding description block directly from the SUSE...

SUSE SLED15: bluez / bluez-auto-enable-devices / bluez-cups / bluez-deprecated / etc (SUSE-SU-2023:3238-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3238-1 advisory. - CVE-2021-41229: Fix leaking buffers stored in cstates cache. bsc1192760 Tenable has extracted the...

SUSE-SU-2023:3240-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache. bsc1192760...

SUSE-SU-2023:3238-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache. bsc1192760...

PT-2023-1008

Name of the Vulnerable Software and Affected Versions BlueZ versions prior to the fixed version Android versions prior to 11 Linux versions with vulnerable Bluetooth stacks macOS versions with vulnerable Bluetooth stacks iOS versions with vulnerable Bluetooth stacks Description A critical Bluetoo...

EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2023-2406)

According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not...

Amazon Linux 2 : bluez (ALAS-2023-2167)

The version of bluez installed on the remote host is prior to 5.44-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2167 advisory. A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially...

Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2023-2406)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: bluez

Issue Overview: A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service. CVE-2022-0204 Affected Packages: bluez Note: This advisory ...