1781 matches found
AZL-34569 CVE-2022-3563 affecting package bluez for versions less than 5.63-4
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...
Null pointer dereference
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...
CVE-2022-3563
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...
CVE-2022-3563
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...
UBUNTU-CVE-2022-3563
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...
CVE-2022-3563
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...
CVE-2022-3563 Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...
CVE-2022-3563 Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...
CVE-2022-3563 Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...
CVE-2022-3563
The CVE-2022-3563 entry affects BlueZ in Linux (BlueZ component; file tools/mgmt-tester.c). The root cause is manipulation of cap_len in read_50_controller_cap_complete, leading to a null pointer dereference. Impact stated as availability loss (NVD score I/A) with no confidentiality/integrity imp...
Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2022-2488)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2022-2488)
According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP...
The vulnerability of the sdp_cstate_alloc_buf function in the Bluetooth technology stack for Linux BlueZ, which allows a hacker to cause a service failure.
The vulnerability of the sdpcstateallocbuf function in the Bluetooth technology stack for Linux BlueZ is related to the lack of memory release when processing a linked list of cstates. Exploiting this vulnerability allows an attacker to cause a service failure...
GLSA-202209-16 : BlueZ: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202209-16 BlueZ: Multiple Vulnerabilities - Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing in the...
BlueZ: Multiple Vulnerabilities
Background BlueZ is the canonical bluetooth tools and system daemons package for Linux. Description Multiple vulnerabilities have been discovered in BlueZ. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround...
Important Photon OS Security Update - PHSA-2022-3.0-0453
Updates of 'bluez' packages of Photon OS have been released...
Denial Of Service (DoS)
BlueZ is vulnerable to denial of service. The vulnerability exists because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c which allows an attacker to cause an application crash...
Information Disclosure
BlueZ is vulnerable to Information Disclosure. The vulnerability exists in multiple functions of avrcp.c because it doesn't properly validate paramslen which allows attackers to obtain sensitive information...
OESA-2022-1922 bluez security update
This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed...