SUSE: Security Advisory (SUSE-SU-2023:0167-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:0168-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information bsc1203121. - CVE-2022-39177: Fixed a memory safety issue that could allow physically proximate attackers to cause a deni...

SUSE-SU-2023:0167-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2022-3563: Fixed a potential crash in the mgmt-tester tool bsc1204426...

SUSE-SU-2023:0166-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information bsc1203121. - CVE-2022-39177: Fixed a memory safety issue that could allow physically proximate attackers to cause a deni...

SUSE-SU-2023:0156-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information bsc1203121. - CVE-2022-39177: Fixed a memory safety issue that could allow physically proximate attackers to cause a deni...

SUSE-SU-2023:0155-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information bsc1203121. - CVE-2022-39177: Fixed a memory safety issue that could allow physically proximate attackers to cause a deni...

EulerOS 2.0 SP5 : bluez (EulerOS-SA-2022-1263)

According to the versions of the bluez packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the...

Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2023-1090)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.6 : bluez (EulerOS-SA-2023-1090)

According to the versions of the bluez package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP...

Denial Of Service (DoS)

bluez-firmware is vulnerable to denial of service DoS attacks. The library does not properly handle the reception of continuous unsolicited LMP responses, allowing an attacker in radio range to trigger a denial of service and restart the device by flooding it with LMPAURand packets after the pagi...

Denial Of Service (DoS)

bluez-firmware is vulnerable to denial of service DoS attacks. The library does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple reconnections to the link slave, allowing an attacker to exhaust device BT resources and eventually trigger a crash vi...

Denial Of Service (DoS)

bluez-firmware is vulnerable to denial of service DoS attacks. The library does not properly handle the reception of LMPmaxslot with a greater ACL length after completion of the LMP setup procedure, allowing an attacker in radio range to trigger a denial of service via a crafted LMP packet...

ROS-20221220-01

A vulnerability in the ath9khtcwaitfortarget function of the Atheros wireless adapter driver of the kernel of the operating system Linux kernel is associated with a post-release usage error. Exploitation of the vulnerability could allow an attacker to access kernel memory by typing a specially...

Amazon Linux 2 : bluez (ALAS-2022-1881)

The version of bluez installed on the remote host is prior to 5.44-7. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1881 advisory. 2023-06-07: CVE-2022-39177 was added to this advisory. A vulnerability was found in BlueZ. This flaw allows physically...

Important: bluez

Issue Overview: 2023-06-07: CVE-2022-39177 was added to this advisory. A vulnerability was found in BlueZ. This flaw allows physically proximate attackers to cause a denial of service due to malformed and invalid capabilities processed in profiles/audio/avdtp.c. CVE-2022-39177 A vulnerability was...

CVE-2022-3563

A vulnerability has been found in BlueZ. This issue affects the read50controllercapcomplete function of the tools/mgmt-tester.c file in the BlueZ component. A manipulation of the caplen argument leads to null pointer dereference...

Denial Of Service (DoS)

bluez is vulnerable to denial of service. The vulnerability exists in function jlinkinit of the file monitor/jlink.c which allows an attacker to cause an application crash...

Null Pointer Dereference

bluez is vulnerable to null pointer dereference. The vulnerability exists due to the manipulation of the argument caplen in read50controllercapcomplete of the file tools/mgmt-tester.c which causes a null pointer dereference resulting in an application crash...

SUSE: Security Advisory (SUSE-SU-2022:3981-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: bluez / bluez-auto-enable-devices / bluez-cups / bluez-deprecated / etc (SUSE-SU-2022:3981-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3981-1 advisory. - CVE-2021-43400: Fixed use-after-free in gatt-database.c bsc1192394. - CVE-2021-3658: Fixed...