BlueZ 安全漏洞

BlueZ is a Bluetooth protocol stack written in C, which is primarily used to provide support for the core Bluetooth layer and protocol. versions prior to BlueZ 5.59 have an input validation error vulnerability that stems from the failure of the profiles/audio/avrcp.c component to validate...

BlueZ 安全漏洞

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layers and protocols. A security vulnerability exists in BlueZ versions prior to 5.59, which stems from the fact that the profiles/audio/avdtp.c component can handle malformed and...

CVE-2022-20224

In ATSKIPREST of btahfclientat.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure in the Bluetooth stack with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20224

In ATSKIPREST of btahfclientat.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure in the Bluetooth stack with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Out-of-bounds

In ATSKIPREST of btahfclientat.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure in the Bluetooth stack with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20224: Out-of-bounds Read

In ATSKIPREST of btahfclientat.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure in the Bluetooth stack with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

The vulnerability of the Bluetooth protocol stack for the Linux operating system BlueZ, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Bluetooth protocol stack for the Linux operating system BlueZ is related to insufficient validation of user-input data during the processing of the A2DP profile. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted data...

PT-2022-14448

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-12L Description The issue is related to an incorrect bounds check in the AT SKIP REST of bta hf client at.cc, which could lead to a possible out of bounds read. This may result in remote information...

ASB-A-220732646

In ATSKIPREST of btahfclientat.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure in the Bluetooth stack with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the database.c component of the Bluetooth protocol stack for the Linux BlueZ operating system allows a hacker to access confidential information.

The vulnerability of the database.c component of the Bluetooth protocol stack for the Linux BlueZ operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to gain access to confidential information...

CVE-2021-3658

The CVE-2021-3658 entry concerns bluez’s bluetoothd: a bug in saving/restoring the Discoverable flag causes a device that was Discoverable when powered down to remain Discoverable when powered back on. Affected component: bluez (bluetoothd). Root cause: incorrect handling of the adapter Discovera...

CVE-2021-3658

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to...

EulerOS 2.0 SP10 : bluez (EulerOS-SA-2022-1219)

According to the versions of the bluez package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device ...

Mageia: Security Advisory (MGASA-2017-0345)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Bluez buffer overflow vulnerability (CNVD-2021-95605)

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layers and protocols. A security vulnerability exists in Bluetoothd in BlueZ version 5.48 and earlier, which stems from a program receiving data without any size checking, and which ca...

ASB-A-197868577

In osimalloc and osicalloc of allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

DEBIAN-CVE-2019-8922

A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the destination buffer. The function simply appends all data passed to it. The values of all attributes that are requested are appended to the output buffer...

The vulnerability of the Bluetooth protocol stack for the Linux BlueZ operating system, related to improper authentication, allows a hacker to gain access to confidential data.

The vulnerability of the Bluetooth protocol stack for the Linux BlueZ operating system is related to improper authentication. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

SUSE-SU-2021:3207-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3759: Unaccounted ipc objects in Linux kernel could have lead to breaking memcg limits and DoS attacks bsc1190115. - CVE-2021-38160: Data corruption or...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:3205-1 Rating: important References: 1040364 1127650 1135481 1152489 1160010 1168202 1171420 1174969 1175052 1175543 1177399 1180100 1180141 1180347 1181006 1181148 1181972 1184180 1185902 1186264...