Lucene search
K

57 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux – Vulnerability in bluez

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability, as the target must connect...

8CVSS7.7AI score0.0229EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.6 views

MiracleLinux 9 : bluez-5.72-2.el9 (AXSA:2024-9114:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9114:01 advisory. bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 BlueZ: Audio Profile AVRCP...

8CVSS9AI score0.07879EPSS
Exploits7References11
OSV
OSV
added 2025/11/13 11:0 a.m.3 views

CLSA-2025-1763031616 bluez: Fix of 10 CVEs

CVE-2023-27349: fix crash while handling unsupported events in avrcp - CVE-2023-44431: fix Stack-based buffer overflow and remote code execution vulnerability - CVE-2023-45866: restrict HID connections to avoid unauthorized input injection - CVE-2023-50229: fix heap-based buffer overflow...

8CVSS7.3AI score0.07879EPSS
Exploits7References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-55051

Malicious code in bioql PyPI...

8CVSS7AI score0.0229EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-56308

Malicious code in bioql PyPI...

7.1CVSS6.8AI score0.01493EPSS
Exploits0References1
OSV
OSV
added 2025/08/13 7:33 p.m.4 views

CLSA-2025-1755113613 bluez: Fix of 2 CVEs

CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone Book Access profile by adding proper validation of user-supplied data length before copying to buffer - CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book Access profile to prevent arbitrary...

8CVSS7.7AI score0.0229EPSS
Exploits0References1
OSV
OSV
added 2025/03/26 3:43 a.m.16 views

MGASA-2025-0115 Updated bluez packages fix security vulnerabilities

BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. CVE-2023-44431 BlueZ Audio Profile AVRCP avrcpparseattributelist Out-Of-Bounds Read Information Disclosure Vulnerability. CVE-2023-51580 BlueZ Audio Profile AVRCP parsemediaelement Out-Of-Bounds Read...

8CVSS6.8AI score0.01563EPSS
Exploits0References3
OSV
OSV
added 2025/01/22 2:41 p.m.6 views

USN-7222-1 bluez vulnerabilities

Lucas Leong discovered that BlueZ incorrectly handled the Phone Book Access profile. If a user were tricked into connecting to a malicious Bluetooth device, a remote attacker could possibly use this issue to execute arbitrary code...

8CVSS7.1AI score0.0229EPSS
Exploits0References3
Ubuntu
Ubuntu
added 2025/01/22 2:41 p.m.12 views

USN-7222-1: BlueZ vulnerabilities

Lucas Leong discovered that BlueZ incorrectly handled the Phone Book Access profile. If a user were tricked into connecting to a malicious Bluetooth device, a remote attacker could possibly use this issue to execute arbitrary code...

8CVSS7.1AI score0.0229EPSS
Exploits0
AstraLinux
AstraLinux
added 2024/11/23 3:4 a.m.2 views

Astra Linux – Vulnerability in bluez

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability, as the target must connect...

8CVSS7.7AI score0.01493EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2024/11/12 9:20 a.m.4 views

bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability

A flaw was found within the handling of the Phone Book Access profile in BlueZ. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a...

8CVSS6.1AI score0.0229EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/11/12 9:20 a.m.64 views

bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability

A flaw was found within the handling of the Phone Book Access profile in BlueZ. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a...

8CVSS6.1AI score0.01493EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2024/11/12 9:20 a.m.5 views

bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability

A flaw was found within the handling of the Phone Book Access profile in BlueZ. In certain conditions, a network-adjacent attacker can execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicio...

7.1CVSS6AI score0.01493EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/05/07 12:0 a.m.4 views

The vulnerability of the Phone Book Access component of the Bluetooth protocol stack for the Linux BlueZ operating system allows a hacker to execute arbitrary code.

The vulnerability of the Phone Book Access component in the Bluetooth protocol stack for the Linux BlueZ operating system is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.1CVSS7.8AI score0.01493EPSS
Exploits0References9Affected Software4
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:16 a.m.2 views

CVE-2023-51596

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS6.2AI score0.01493EPSS
Exploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2024/05/03 3:16 a.m.18 views

CVE-2023-51596

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.6AI score0.01493EPSS
Exploits0
NVD
NVD
added 2024/05/03 3:16 a.m.20 views

CVE-2023-51596

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.5AI score0.01493EPSS
Exploits0References1
OSV
OSV
added 2024/05/03 3:16 a.m.1 views

DEBIAN-CVE-2023-51596

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.4AI score0.01493EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2024/05/03 3:16 a.m.22 views

CVE-2023-50230

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.9AI score0.01493EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2024/05/03 3:16 a.m.18 views

CVE-2023-50229

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must...

7.1CVSS7.2AI score0.0229EPSS
Exploits0
Rows per page
Query Builder