19 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-39177
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in...
Debian dla-3879 : bluetooth - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3879 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3879-1 [email protected]...
RHEL 7 : bluez (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - bluez: double free in gatttool client disconnect callback handler in src/shared/att.c could lead to DoS o...
EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2023-2406)
According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not...
Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2023-1742)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.2.0 : bluez (EulerOS-SA-2023-1742)
According to the versions of the bluez package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP...
Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2023-1491)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : bluez (EulerOS-SA-2023-1491)
According to the versions of the bluez packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate paramsle...
SUSE SLES15 Security Update : bluez (SUSE-SU-2023:0168-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0168-1 advisory. - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information...
SUSE SLES15 Security Update : bluez (SUSE-SU-2023:0156-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0156-1 advisory. - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information...
SUSE SLES15 Security Update : bluez (SUSE-SU-2023:0155-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0155-1 advisory. - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information...
SUSE: Security Advisory (SUSE-SU-2023:0166-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2023:0156-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: bluez
Issue Overview: 2023-06-07: CVE-2022-39177 was added to this advisory. A vulnerability was found in BlueZ. This flaw allows physically proximate attackers to cause a denial of service due to malformed and invalid capabilities processed in profiles/audio/avdtp.c. CVE-2022-39177 A vulnerability was...
Debian: Security Advisory (DLA-3157-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3157-1] bluez security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3157-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 24, 2022 https://wiki.debian.org/LTS -...
Debian dla-3157 : bluetooth - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3157 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3157-1 [email protected]...
CVE-2022-39177
CVE-2022-39177 affects BlueZ before 5.59. The vulnerability allows physically proximate attackers to cause a denial of service by sending malformed/invalid capabilities that are processed in profiles/audio/avdtp.c. Connected sources (Astra Linux bulletin and Debian/Debian LTS/DLA-3879) confirm Bl...
CVE-2022-39177
BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c...