SUSE: Security Advisory (SUSE-SU-2024:0182-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: bluez / bluez-auto-enable-devices / bluez-cups / bluez-deprecated / etc (SUSE-SU-2024:0183-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0183-1 advisory. - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book...

SUSE-SU-2024:0183-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation bsc1218300. - CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access...

SUSE-SU-2024:0182-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation bsc1218300. - CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access...

BlueZ Security Vulnerability

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layers and protocols. A security vulnerability exists in BlueZ that stems from an out-of-bounds write issue...

SUSE: Security Advisory (SUSE-SU-2024:0167-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:0166-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BlueZ Security Vulnerability

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layers and protocols. A security vulnerability exists in BlueZ that stems from an out-of-bounds write issue...

SUSE SLES15 Security Update : bluez (SUSE-SU-2024:0166-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0166-1 advisory. - CVE-2021-41229: Fix leaking buffers stored in cstates cache bsc1192760. - CVE-2023-50229: Fixed an out of bounds write in the...

SUSE SLES15 Security Update : bluez (SUSE-SU-2024:0167-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0167-1 advisory. - CVE-2021-41229: Fix leaking buffers stored in cstates cache bsc1192760. - CVE-2023-50229: Fixed an out of bounds write in the...

SUSE-SU-2024:0167-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache bsc1192760. - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation bsc1218300. - CVE-2023-50230: Fixed an out of...

SUSE-SU-2024:0166-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache bsc1192760. - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation bsc1218300. - CVE-2023-50230: Fixed an out of...

bluez:fuzz_xml: Heap-use-after-free in sdp_data_free

Project: https://github.com/bluez/bluez.git Detailed Report: https://oss-fuzz.com/testcase?key=5750790459293696 Project: bluez Fuzzing Engine: libFuzzer Fuzz Target: fuzzxml Job Type: libfuzzerasanbluez Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6020000003d0 Crash...

EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2023-3393)

According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access...

CVE-2023-45866 affecting package bluez for versions less than 5.63-5

CVE-2023-45866 affecting package bluez for versions less than 5.63-5. A patched version of the package is available...

OESA-2024-1056 bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: VUL-0: CVE-2023-50230: bluez: BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2023-50230...

OESA-2024-1029 bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: VUL-0: CVE-2023-50229: bluez: BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2023-50229...

Important: bluez

Issue Overview: bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 Affected Packages: bluez Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL...

Amazon Linux 2 : bluez (ALAS-2024-2386)

The version of bluez installed on the remote host is prior to 5.44-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2386 advisory. bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 Tenable has...

Important: bluez

Issue Overview: bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 Affected Packages: bluez Issue Correction: Run dnf update bluez --releasever 2023.3.20240108 to update your system. New Packages: aarch64: ...