SUSE-SU-2020:3165-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2020-27153: Fixed possible crash on disconnect bsc1177895...

SUSE-SU-2020:3034-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2020-27153: Fixed crash on disconnect bsc1177895. - CVE-2020-0556: Fixed potential escalation of privilege and denial of service via adjacent access, caused by improper access control bsc1166751...

MGASA-2020-0152 Updated bluez packages fix security vulnerabilities

The updated packages fix security vulnerabilities: A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of...

GLSA-202003-49 : BlueZ: Security bypass

The remote host is affected by the vulnerability described in GLSA-202003-49 BlueZ: Security bypass It was discovered that the HID and HOGP profiles implementations in BlueZ did not specifically require bonding between the device and the host. Impact : A remote attacker with adjacent access could...

OPENSUSE-SU-2019:2588-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712. This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2019:3046-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712...

OPENSUSE-SU-2019:1476-1 Security update for bluez

This update for bluez fixes the following issues: Security issues fixed: - CVE-2016-9797: Fixed a buffer over-read in l2capdump bsc1013708. - CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712. - CVE-2016-9917: Fixed a heap-based buffer overflow in readn bsc1015171. This update was...

SUSE-SU-2019:1339-1 Security update for bluez

This update for bluez fixes the following issues: Security vulnerability addressed: - CVE-2016-9797: Fixed a buffer over-read in l2capdump bsc1013708. - CVE-2016-9798: Fixed a use-after-free in confopt bsc1013712. - CVE-2016-9917: Fixed a heap-based buffer overflow in readn bsc1015171. -...

SUSE-SU-2019:0510-1 Security update for bluez

This update for bluez fixes the following issues: Security issues fixed: - CVE-2016-7837: Fixed possible buffer overflow, make sure we don't write past the end of the array.bsc1026652 - CVE-2016-9800: Fix hcidump memory leak in pincodereplydump bsc1013721. - CVE-2016-9801: Fixed a buffer overflow...

SUSE-SU-2018:4188-1 Security update for bluez

This update for bluez fixes the following issues: Security issues fixed: - CVE-2016-9800: Fixed a buffer overflow in the pincodereplydump function bsc1013721 - CVE-2016-9801: Fixed a buffer overflow in the setextctrl function bsc1013732...

SUSE-SU-2018:1778-1 Security update for bluez

This update for bluez fixes the following issues: Security issues fixed: - CVE-2016-9800: Fix hcidump memory leak in pincodereplydump bsc1013721. - CVE-2016-9804: Fix hcidump buffer overflow in commandsdump bsc1013877. - CVE-2016-7837: Fix possible buffer overflow, make sure we don't write past t...

CVE-2016-9918

In BlueZ 5.42, an out-of-bounds read was identified in "packethexdump" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash...