Amazon Linux 2023 : bluez, bluez-cups, bluez-deprecated (ALAS2023-2023-212)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-212 advisory. A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a...

Medium: bluez

Issue Overview: A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service. CVE-2022-0204 Affected Packages: bluez Issue Correction: Ru...

Important Photon OS Security Update - PHSA-2023-4.0-0392

Updates of 'bluez' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0006

Updates of 'bluez', 'linux' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-91-0006

Updates of 'linux', 'bluez' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-3.0-0580

Updates of 'bluez' packages of Photon OS have been released...

Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2023-1742)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.0 : bluez (EulerOS-SA-2023-1742)

According to the versions of the bluez package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP...

PT-2023-9090 · Bluez +8 · Bluez +8

Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this issue, where the target must connect to...

PT-2023-9092 · Bluez +4 · Bluez +4

Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: The issue is related to a heap-based buffer overflow in the Phone Book Access profile of BlueZ, allowing network-adjacent attackers to execute arbitrary code on affected installations. User...

PT-2023-9855 · Bluez +8 · Bluez +8

Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: The issue is related to a heap-based buffer overflow in the Phone Book Access profile of BlueZ, which can be exploited by network-adjacent attackers to execute arbitrary code on affected...

Critical Photon OS Security Update - PHSA-2023-3.0-0570

Updates of 'redis', 'bluez' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-4.0-0380

Updates of 'redis', 'libxml2', 'libyang', 'bluez', 'vim' packages of Photon OS have been released...

OESA-2023-1249 bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: CVE-2023-27349...

SUSE CVE-2023-27349

BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the...

PT-2023-9086 · Bluez +4 · Bluez +4

Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: The issue is related to a stack-based buffer overflow in the Audio Profile AVRCP component of the BlueZ Bluetooth protocol stack for Linux. This allows network-adjacent attackers to execute...

CVE-2022-3637

A flaw was found in the Linux Kernel, affecting the jlinkinit function of the monitor/jlink.c file in the BlueZ component. Manipulation leads to a denial of service...

PT-2023-8670 · Bluez +9 · Bluez +9

Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: The issue is related to the improper validation of array indexes in the AVRCP protocol handling of BlueZ, which can result in a write past the end of an allocated buffer. This allows...

Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2023-1491)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : bluez (EulerOS-SA-2023-1491)

According to the versions of the bluez packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate paramsle...