CVE-2023-27349

BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the...

BlueZ 安全漏洞

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layer and protocol. A security vulnerability exists in BlueZ that stems from the presence of an out-of-bounds read information disclosure vulnerability that allows network-adjacent...

BlueZ 安全漏洞

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layer and protocol. A security vulnerability exists in BlueZ that stems from the presence of an out-of-bounds read information disclosure vulnerability, which allows network neighbor...

CVE-2023-51596: Heap-based Buffer Overflow

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-51580: Out-of-bounds Read

BlueZ Audio Profile AVRCP avrcpparseattributelist Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this...

CVE-2023-51592: Out-of-bounds Read

BlueZ Audio Profile AVRCP parsemediafolder Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability i...

CVE-2023-50230: Heap-based Buffer Overflow

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

BlueZ 安全漏洞

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layer and protocol. A security vulnerability exists in BlueZ that stems from the presence of a heap-based buffer overflow remote code execution vulnerability that could allow a...

BlueZ 安全漏洞

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layer and protocol. A security vulnerability exists in BlueZ that stems from the presence of an out-of-bounds read information disclosure vulnerability, which allows network neighbor...

CVE-2023-50229: Heap-based Buffer Overflow

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

CVE-2023-44431: Stack-based Buffer Overflow

BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target...

BlueZ 安全漏洞

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layer and protocol. A security vulnerability exists in BlueZ that stems from the presence of a stack-based buffer overflow remote code execution vulnerability that could allow a...

CVE-2023-27349: Improper Validation of Array Index

BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the...

BlueZ 安全漏洞

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layer and protocol. A security vulnerability exists in BlueZ that stems from the presence of an out-of-bounds read information disclosure vulnerability, which allows network neighbor...

CVE-2023-51589: Out-of-bounds Read

BlueZ Audio Profile AVRCP parsemediaelement Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability ...

CVE-2023-51594: Out-of-bounds Read

BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a...

bluez:fuzz_xml: Stack-buffer-overflow in sdp_xml_parse_uuid

Project: https://github.com/bluez/bluez.git Detailed Report: https://oss-fuzz.com/testcase?key=5070205940531200 Project: bluez Fuzzing Engine: afl Fuzz Target: fuzzxml Job Type: aflasanbluez Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7f1b16c6f830 Crash State:...

Critical Photon OS Security Update - PHSA-2024-4.0-0591

Updates of 'httpd', 'nghttp2', 'linux-aws', 'bluez', 'util-linux', 'iperf', 'linux', 'linux-secure', 'linux-rt' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-3.0-0747

Updates of 'bluez', 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'linux-rt', 'util-linux' packages of Photon OS have been released...

ROS-20240408-06

A vulnerability in the HID Profile Human Interface Device interface of the Bluetooth protocol stack for the Linux BlueZ operating system is related to an access control flaw. Exploitation of the vulnerability could allow an attacker, acting remotely, escalate their privileges and execute arbitrar...