PT-2023-1008

Name of the Vulnerable Software and Affected Versions BlueZ versions prior to the fixed version Android versions prior to 11 Linux versions with vulnerable Bluetooth stacks macOS versions with vulnerable Bluetooth stacks iOS versions with vulnerable Bluetooth stacks Description A critical Bluetoo...

EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2023-2406)

According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not...

Amazon Linux 2 : bluez (ALAS-2023-2167)

The version of bluez installed on the remote host is prior to 5.44-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2167 advisory. A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially...

Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2023-2406)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: bluez

Issue Overview: A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service. CVE-2022-0204 Affected Packages: bluez Note: This advisory ...

Amazon Linux 2023 : bluez, bluez-cups, bluez-deprecated (ALAS2023-2023-262)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-262 advisory. A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of...

Low: bluez

Issue Overview: A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to...

SUSE SLED15: bluez / bluez-auto-enable-devices / bluez-cups / bluez-deprecated / etc (SUSE-SU-2023:2605-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2605-1 advisory. - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398. Tenable has extracted the...

SUSE-SU-2023:2613-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

SUSE-SU-2023:2605-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

SUSE: Security Advisory (SUSE-SU-2023:2562-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : bluez (SUSE-SU-2023:2562-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2562-1 advisory. - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398. Tenable has extracted the preceding...

SUSE-SU-2023:2562-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

SUSE SLES15 Security Update : bluez (SUSE-SU-2023:2545-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2545-1 advisory. - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398. Tenable has extracted the preceding description block directly...

SUSE-SU-2023:2546-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

SUSE-SU-2023:2545-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

SUSE-SU-2023:2533-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

SUSE: Security Advisory (SUSE-SU-2023:2533-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:2545-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : bluez (SUSE-SU-2023:2533-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2533-1 advisory. - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398. Tenable has extracted the preceding description block directly...