2028 matches found
OESA-2022-1922 bluez security update
This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed...
Important Photon OS Security Update - PHSA-2022-4.0-0245
Updates of 'libtiff', 'bluez' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-0245
Updates of 'libtiff', 'bluez' packages of Photon OS have been released...
BlueZ Bluetooth Authentication
The vulnerability of the Bluetooth technology stack for Linux BlueZ is related to the improper saving of the Discoverable status of adapters when a device is disabled. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
CVE-2022-39177
A vulnerability was found in BlueZ. This flaw allows physically proximate attackers to cause a denial of service due to malformed and invalid capabilities processed in profiles/audio/avdtp.c...
CVE-2022-39176
A vulnerability was found in BlueZ. This flaw allows physically proximate attackers to obtain sensitive information because the profiles/audio/avrcp.c does not validate paramslen...
SUSE SLED15: bluez / bluez-auto-enable-devices / bluez-cups / bluez-deprecated / etc (SUSE-SU-2022:3247-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3247-1 advisory. - CVE-2022-0204: Fixed check if the prepare writes would append more than the allowed maximum attribute...
SUSE: Security Advisory (SUSE-SU-2022:3247-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for bluez (SUSE-SU-2022:3247-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE-SU-2022:3247-1 Security update for bluez
This update for bluez fixes the following issues: - CVE-2022-0204: Fixed check if the prepare writes would append more than the allowed maximum attribute length bsc1194704...
BlueZ GATT Code Execution
The vulnerability of the GATT Generic Attribute Profile implementation in the Bluetooth protocol stack for the Linux BlueZ operating system is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...
bluez:fuzz_textfile: Crash in write_key
Project: https://github.com/bluez/bluez.git Detailed Report: https://oss-fuzz.com/testcase?key=5133480756903936 Project: bluez Fuzzing Engine: libFuzzer Fuzz Target: fuzztextfile Job Type: libfuzzerasanbluez Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f085f064fff Crash State:...
bluez:fuzz_textfile: Heap-double-free in fuzz_textfile.c
Project: https://github.com/bluez/bluez.git Detailed Report: https://oss-fuzz.com/testcase?key=4723844560060416 Project: bluez Fuzzing Engine: honggfuzz Fuzz Target: fuzztextfile Job Type: honggfuzzasanbluez Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x607000000090 Crash State...
BlueZ input validation error vulnerability
BlueZ is a Bluetooth protocol stack written in C, which is primarily used to provide support for the core Bluetooth layer and protocol. versions prior to BlueZ 5.59 have an input validation error vulnerability that stems from the failure of the profiles/audio/avrcp.c component to validate...
CVE-2022-39177
BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c...
CVE-2022-39176
BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate paramslen...
DEBIAN-CVE-2022-39176
BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate paramslen...
DEBIAN-CVE-2022-39177
BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c...
