PT-2023-25353

Name of the Vulnerable Software and Affected Versions Bosch BT software products affected versions not specified Description The issue is related to the improper handling of malformed API answer packets to API clients, which can lead to a Denial of Service DoS situation. An unauthenticated attack...

CVE-2023-32230: Improper Check or Handling of Exceptional Conditions

An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service DoS situation...

PT-2023-23674 · Bosch · Bosch Bt

Name of the Vulnerable Software and Affected Versions: Bosch BT software products affected versions not specified Description: The issue is related to the improper handling of a malformed API request to an API server in Bosch BT software products. This can allow an unauthenticated attacker to cau...

bt-sa.co.za Improper Access Control vulnerability OBB-3810853

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-28587

Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level...

Memory corruption

Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level...

CVE-2023-28587 Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller

Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level...

CVE-2023-28587

CVE-2023-28587 describes a memory corruption issue in Qualcomm Chipsets’ Bluetooth (BT) controller, occurring when parsing debug commands with specific sub-opcodes at the HCI interface level. The underlying root cause is an improper handling of memory buffers, leading to memory corruption during ...

CVE-2023-28587: Improper Restriction of Operations within the Bounds of a Memory Buffer

Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level...

Amazon Linux 2 : wireshark (ALAS-2023-2267)

The version of wireshark installed on the remote host is prior to 2.6.2-15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2267 advisory. BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet...

The vulnerability of the bt_quickfix function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Fedora 38 : wireshark (2023-abc9ca1e7e)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-abc9ca1e7e advisory. New version 4.0.8. Includes fixes for CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513. Tenable has extracted the preceding description...

CVE-2023-21667

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard...

Code injection

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard...

CVE-2023-21667 Buffer Over-read in Bluetooth HOST

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard...

CVE-2023-21667

CVE-2023-21667 describes a transient DoS in the Bluetooth HOST when passing a descriptor to validate a blacklisted Bluetooth keyboard. The vulnerability is referenced in Qualcomm’s Bluetooth context (QC-CR#3306293) and appears in multiple feeds (NVD and Red Hat entries) with a base CVSS v3.1 scor...

CVE-2023-21667: Buffer Over-read

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard...

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists due to the memory leak in the BT SDP dissector, which allows an attacker to cause an application crash via packet injection or crafted capture file...

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists due to the infinite loop in the BT SDP dissector, which allows an attacker to cause an application crash via packet injection or crafted capture file...

Malware in @bt-lotus-cicd/eslint-config-lotus

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...