CVE-2022-3563

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...

Null pointer dereference

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...

CVE-2022-3563 Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...

CVE-2022-3563 Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...

PT-2022-6905

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A problematic vulnerability has been found in the Linux Kernel, specifically in the function read 50 controller cap complete of the file tools/mgmt-tester.c of the component BlueZ. The...

CVE-2022-3563: Improper Resource Shutdown or Release

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...

CVE-2022-3563

The CVE-2022-3563 entry affects BlueZ in Linux (BlueZ component; file tools/mgmt-tester.c). The root cause is manipulation of cap_len in read_50_controller_cap_complete, leading to a null pointer dereference. Impact stated as availability loss (NVD score I/A) with no confidentiality/integrity imp...

CVE-2022-3563 Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...

CVE-2022-3563

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...

Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2022-2488)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2022-2488)

According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP...

bluez:fuzz_xml: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5915108861935616 Project: bluez Fuzzing Engine: libFuzzer Fuzz Target: fuzzxml Job Type: libfuzzerubsanbluez Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000014b31 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...

Bluetooth BlueZ sdp_cstate_alloc_buf Buffer Overflow DoS

The vulnerability of the sdpcstateallocbuf function in the Bluetooth technology stack for Linux BlueZ is related to the lack of memory release when processing a linked list of cstates. Exploiting this vulnerability allows an attacker to cause a service failure...

GLSA-202209-16 : BlueZ: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202209-16 BlueZ: Multiple Vulnerabilities - Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing in the...

BlueZ: Multiple Vulnerabilities

Background BlueZ is the canonical bluetooth tools and system daemons package for Linux. Description Multiple vulnerabilities have been discovered in BlueZ. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround...

bluez:fuzz_xml: Index-out-of-bounds in sdp_xml_parse_uuid

Project: https://github.com/bluez/bluez.git Detailed Report: https://oss-fuzz.com/testcase?key=5476443139735552 Project: bluez Fuzzing Engine: libFuzzer Fuzz Target: fuzzxml Job Type: libfuzzerubsanbluez Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: sdpxmlparseuui...

bluez:fuzz_xml: Heap-buffer-overflow in element_end

Project: https://github.com/bluez/bluez.git Detailed Report: https://oss-fuzz.com/testcase?key=5896441415729152 Project: bluez Fuzzing Engine: libFuzzer Fuzz Target: fuzzxml Job Type: libfuzzerasanbluez Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x602000000118 Crash...

Important Photon OS Security Update - PHSA-2022-3.0-0453

Updates of 'bluez' packages of Photon OS have been released...

Denial Of Service (DoS)

BlueZ is vulnerable to denial of service. The vulnerability exists because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c which allows an attacker to cause an application crash...

Information Disclosure

BlueZ is vulnerable to Information Disclosure. The vulnerability exists in multiple functions of avrcp.c because it doesn't properly validate paramslen which allows attackers to obtain sensitive information...