Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:3179-1 Rating: important References: 1040364 1127650 1135481 1152489 1160010 1168202 1171420 1174969 1175052 1175543 1177399 1180100 1180141 1180347 1181006 1181148 1181972 1184180 1185902 1186264...

Texas Instruments Ble Stack 安全漏洞

Texas Instruments Ble Stack is a low-power Bluetooth software stack from Texas Instruments, USA. A security vulnerability exists in Texas Instruments Ble Stack. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

DEBIAN-CVE-2021-34145

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMPmaxslot with an invalid Baseband packet type and LTADDRESS and LTADDR after completion of the LMP setup procedure, allowing attackers in radio range...

Espressif ESP-IDF 安全漏洞

Espressif ESP-IDF is an Internet of Things IoT development framework from China's Lexin Information Technology Espressif. Espressif ESP-IDF suffers from a security vulnerability that stems from a security issue in the commercial BT stack. The vulnerability can be exploited by an attacker to cause...

BrakTooth 输入验证错误漏洞

BrakTooth is a family of 20 vulnerabilities affecting over 1,400 products based on 13 different Bluetooth devices sold by 11 of the world's leading vendors. An input validation error vulnerability exists in the BrakTooth Business Bluetooth Stack BT, which could lead to a DoS and arbitrary code...

kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan

A use-after-free flaw was found in hcisendacl in the bluetooth host controller interface HCI in Linux kernel, where a local attacker with an access rights could cause a denial of service problem on the system The issue results from the object hchan, freed in hcidisconnloglinkcompleteevt, yet stil...

The vulnerability of the Bluetooth stack implementation in the Red Hat Enterprise Linux kernel allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Bluetooth stack implementation in the Red Hat Enterprise Linux kernel is related to access to data without type checking. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

Binary vulnerability in Bluetooth stack

Bluetooth stack is a protocol stack that contains traditional Bluetooth and low power Bluetooth, belongs to the ultra-lightweight Bluetooth stack, used for people who want to learn Bluetooth protocol stack. A binary vulnerability exists in the Bluetooth stack, which can be exploited by attackers ...

SUSE: Security Advisory (SUSE-SU-2017:2778-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2774-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2782-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2776-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2792-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 34 Update: bluedevil-5.21.3-1.fc34

BlueDevil is the bluetooth stack for KDE...

ASB-A-174052148

In sdpcopyrawdata of sdpdiscovery.cc, there is a possible system compromise due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2020-27524

On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version N+RCNAUP0395 mishandles %x and %s format string specifiers in a device name. This may lead to memory content leaks and potentially crash the services...

CVE-2020-27524

On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version N+RCNAUP0395 mishandles %x and %s format string specifiers in a device name. This may lead to memory content leaks and potentially crash the services...

CVE-2020-27524: Use of Externally-Controlled Format String

On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version N+RCNAUP0395 mishandles %x and %s format string specifiers in a device name. This may lead to memory content leaks and potentially crash the services...

kernel: net: bluetooth: information leak when processing certain AMP packets

An information leak flaw was found in the way Linux kernel’s Bluetooth stack implementation handled initialization of stack memory when handling certain AMP Alternate MAC-PHY Manager Protocol packets. This flaw allows a remote attacker in an adjacent range to leak small portions of stack memory o...

Linux kernel information disclosure vulnerability (CNVD-2020-65149)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. The Linux kernel Bluetooth stack implementation handled in a security vulnerability that could be exploited by an attacker to cause a small amount of stack memory to b...