ROOT-OS-DEBIAN-12-CVE-2023-51594 CVE-2023-51594 in bluez - Patched by Root

Root has patched CVE-2023-51594 in the bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2016-9804 CVE-2016-9804 in bluez - Patched by Root

Root has patched CVE-2016-9804 in the bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2016-9798 CVE-2016-9798 in bluez - Patched by Root

Root has patched CVE-2016-9798 in the bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2016-9918 CVE-2016-9918 in bluez - Patched by Root

Root has patched CVE-2016-9918 in the bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2016-9800 CVE-2016-9800 in bluez - Patched by Root

Root has patched CVE-2016-9800 in the bluez package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-44431 CVE-2023-44431 in bluez - Patched by Root

Root has patched CVE-2023-44431 in the bluez package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-51594 CVE-2023-51594 in bluez - Patched by Root

Root has patched CVE-2023-51594 in the bluez package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-80186 CVE-2026-80186 in bluez - Patched by Root

Root has patched CVE-2026-80186 in the bluez package for Root:Debian:11. Multiple fixed versions available...

[SECURITY] Fedora 44 Update: bluez-5.87+1.git8750129efca8-1.fc44

Utilities for use in Bluetooth applications: - avinfo - bluemoon - bluetoothctl - bluetoothd - btattach - btmon - hex2hcd - mpris-proxy The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

Fedora 44 : bluez (2026-d4156b5fc5)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d4156b5fc5 advisory. This update fixes a number of security issues. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 45 : bluez (2026-84b4f1c43a)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-84b4f1c43a advisory. BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP X...

Blue-Borne

Blue-Borne BlueBorne Exploits & Framework This repository contains a PoC code of various exploits for the BlueBorne vulnerabilities. Under 'android' exploits for the Android RCE vulnerability CVE-2017-0781, and the SDP Information leak vulnerability CVE-2017-0785 can be found. Under 'linux-bluez'...

Linux-Heap-Based-Type-Confusion-in-L2CAP

Linux: Heap-Based Type Confusion in L2CAP CVE-2020-12351 Linux: Heap-Based Type Confusion in L2CAP PoC CVE-2020-12351 on BLE implementation Why did I modify the original PoC? The original PoC is focused on sending a malicious l2cap packet via Bluetooth Classic. However, I had a requirement to tes...

TencentOS Server 4: bluez (TSSA-2026:0960)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0960 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-85218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - bluez - None Red Hat Enterprise Linux - bluez: bluez: AVRCP ListPlayerAttributes double stack overflow in...

CVE-2026-85218

A double stack-based buffer overflow was found in the BlueZ AVRCP controller implementation. A nearby BR/EDR peripheral can send a crafted AVRCP player-settings response that supplies an attacker-controlled attribute count, causing avrcplistplayerattributesrsp and avrcpgetcurrentplayervalue in...

[SECURITY] Fedora 43 Update: bluez-5.87-6.fc43

Utilities for use in Bluetooth applications: - avinfo - bluemoon - bluetoothctl - bluetoothd - btattach - btmon - hex2hcd - mpris-proxy The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

Fedora 43 : bluez (2026-d4eec45564)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d4eec45564 advisory. BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP X...

SUSE CVE-2026-80185

BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...

SUSE CVE-2026-80186

A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response EIR packet that causes a buffer overflow when the target device performs Bluetooth discovery. This...