Unity Linux 20.1070e Security Update: bluez (UTSA-2026-016764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016764 advisory. BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdpcstateallocbuf which allocates memory which will always be hung in t...

Astra Linux - уязвимость в bluez

In BlueZ before version 5.55, a double-free error was detected in the gatttool disconnectcb routine from the shared/att.c file. A remote attacker could potentially cause a denial of service or code execution during service discovery, due to the redundant disconnect MGMT event...

ROOT-OS-DEBIAN-12-CVE-2023-51594 CVE-2023-51594 in rootio-bluez - Patched by Root

Root has patched CVE-2023-51594 in the rootio-bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2016-9918 CVE-2016-9918 in rootio-bluez - Patched by Root

Root has patched CVE-2016-9918 in the rootio-bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2023-51589 CVE-2023-51589 in rootio-bluez - Patched by Root

Root has patched CVE-2023-51589 in the rootio-bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2016-9800 CVE-2016-9800 in rootio-bluez - Patched by Root

Root has patched CVE-2016-9800 in the rootio-bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2016-9804 CVE-2016-9804 in rootio-bluez - Patched by Root

Root has patched CVE-2016-9804 in the rootio-bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2016-9797 CVE-2016-9797 in rootio-bluez - Patched by Root

Root has patched CVE-2016-9797 in the rootio-bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2023-44431 CVE-2023-44431 in rootio-bluez - Patched by Root

Root has patched CVE-2023-44431 in the rootio-bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2016-9803 CVE-2016-9803 in rootio-bluez - Patched by Root

Root has patched CVE-2016-9803 in the rootio-bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2016-9798 CVE-2016-9798 in rootio-bluez - Patched by Root

Root has patched CVE-2016-9798 in the rootio-bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2016-9917 CVE-2016-9917 in rootio-bluez - Patched by Root

Root has patched CVE-2016-9917 in the rootio-bluez package for Root:Debian:12. Multiple fixed versions available...

Astra Linux - уязвимость в bluez

BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c...

Astra Linux - уязвимость в linux, bluez

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing in the Passkey authentication procedure by reflection of the public key and the authentication evidence of the initiati...

Astra Linux - уязвимость в linux, bluez

Improper access control in BlueZ may allow a authenticated user to potentially enable information disclosure through adjacent access...

Astra Linux - уязвимость в bluez

BlueZ is a Bluetooth protocol stack for Linux. In affected versions, there is a vulnerability in sdpcstateallocbuf, which allocates memory that will always remain locked in the singly linked list of cstates and will not be freed. This will lead to a memory leak over time. The allocated data can b...

Astra Linux - уязвимость в bluez

BlueZ Audio Profile: Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected BlueZ installations. User interaction is required to exploit this vulnerability, as the target must...

Astra Linux - уязвимость в bluez

A issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free condition can occur when a client disconnects during D-Bus processing of a WriteValue call...

Astra Linux - уязвимость в linux-6.1, linux-5.10, linux-5.15

BlueZ HID over GATT Profile: Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected BlueZ installations. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

Astra Linux - уязвимость в bluez

BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate paramslen...