Veracode Vulnerability DatabaseVERACODE:34093Denial Of Service (DoS)
8.8 High
CVSS3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
5.8 Medium
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:A/AC:L/Au:N/C:P/I:P/A:P
bluez is vulnerable to denial of service. The vulnerability exists due to a heap overflow which allows attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
References
git://git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2022-0204
bugzilla.redhat.com/show_bug.cgi?id=2039807
github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0
github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q
lists.debian.org/debian-lts-announce/2022/10/msg00026.html
security.gentoo.org/glsa/202209-16
Related
8.8 High
CVSS3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
5.8 Medium
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:A/AC:L/Au:N/C:P/I:P/A:P