1757 matches found
CVE-2022-3563
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...
CVE-2022-3563
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...
CVE-2022-3563 Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...
CVE-2022-3563 Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...
CVE-2022-3563
The CVE-2022-3563 entry affects BlueZ in Linux (BlueZ component; file tools/mgmt-tester.c). The root cause is manipulation of cap_len in read_50_controller_cap_complete, leading to a null pointer dereference. Impact stated as availability loss (NVD score I/A) with no confidentiality/integrity imp...
CVE-2022-3563 Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...
Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2022-2488)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2022-2488)
According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP...
The vulnerability of the sdp_cstate_alloc_buf function in the Bluetooth technology stack for Linux BlueZ, which allows a hacker to cause a service failure.
The vulnerability of the sdpcstateallocbuf function in the Bluetooth technology stack for Linux BlueZ is related to the lack of memory release when processing a linked list of cstates. Exploiting this vulnerability allows an attacker to cause a service failure...
GLSA-202209-16 : BlueZ: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202209-16 BlueZ: Multiple Vulnerabilities - Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing in the...
BlueZ: Multiple Vulnerabilities
Background BlueZ is the canonical bluetooth tools and system daemons package for Linux. Description Multiple vulnerabilities have been discovered in BlueZ. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround...
Important Photon OS Security Update - PHSA-2022-3.0-0453
Updates of 'bluez' packages of Photon OS have been released...
Denial Of Service (DoS)
BlueZ is vulnerable to denial of service. The vulnerability exists because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c which allows an attacker to cause an application crash...
Information Disclosure
BlueZ is vulnerable to Information Disclosure. The vulnerability exists in multiple functions of avrcp.c because it doesn't properly validate paramslen which allows attackers to obtain sensitive information...
OESA-2022-1922 bluez security update
This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed...
Important Photon OS Security Update - PHSA-2022-0245
Updates of 'libtiff', 'bluez' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-4.0-0245
Updates of 'libtiff', 'bluez' packages of Photon OS have been released...
The vulnerability of the Bluetooth technology stack for Linux BlueZ, related to improper authentication, allows a malicious actor to gain access to confidential data.
The vulnerability of the Bluetooth technology stack for Linux BlueZ is related to the improper saving of the Discoverable status of adapters when a device is disabled. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
CVE-2022-39177
A vulnerability was found in BlueZ. This flaw allows physically proximate attackers to cause a denial of service due to malformed and invalid capabilities processed in profiles/audio/avdtp.c...