Search for packages
| purl | pkg:deb/debian/bluez@5.23-2%2Bdeb8u1 |
| Next non-vulnerable version | 5.66-1+deb12u2 |
| Latest non-vulnerable version | 5.66-1+deb12u2 |
| Risk | 4.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-15pa-mh4x-13ch
Aliases: CVE-2021-3658 |
bluez: adapter incorrectly restores Discoverable state after powered down |
Affected by 0 other vulnerabilities. |
|
VCID-1d6b-y23m-dqgf
Aliases: CVE-2023-50230 |
bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability |
Affected by 0 other vulnerabilities. |
|
VCID-3fxv-jphd-cyfs
Aliases: CVE-2022-39177 |
bluez: BlueZ allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c |
Affected by 0 other vulnerabilities. |
|
VCID-5kag-2abg-qke2
Aliases: CVE-2022-0204 |
Multiple vulnerabilities have been discovered in BlueZ, the worst of which could result in arbitrary code execution. |
Affected by 0 other vulnerabilities. |
|
VCID-6d8c-y2y7-t3cj
Aliases: CVE-2021-3588 |
Multiple vulnerabilities have been discovered in BlueZ, the worst of which could result in arbitrary code execution. |
Affected by 9 other vulnerabilities. |
|
VCID-72rt-6t6r-87a8
Aliases: CVE-2023-45866 |
Multiple vulnerabilities have been discovered in Bluez, the worst of which can lead to privilege escalation. |
Affected by 9 other vulnerabilities. |
|
VCID-9317-anru-ekes
Aliases: CVE-2020-27153 |
A vulnerability in BlueZ might allow remote attackers to execute arbitrary code. |
Affected by 17 other vulnerabilities. Affected by 9 other vulnerabilities. |
|
VCID-ct1g-g65k-5kfa
Aliases: CVE-2021-43400 |
bluez: use-after-free in gatt-database.c |
Affected by 0 other vulnerabilities. |
|
VCID-ctaf-8vuf-tqgg
Aliases: CVE-2020-26558 |
Multiple vulnerabilities have been discovered in BlueZ, the worst of which could result in arbitrary code execution. |
Affected by 17 other vulnerabilities. Affected by 9 other vulnerabilities. |
|
VCID-g2pd-d2mm-8fd3
Aliases: CVE-2021-41229 |
bluez: memory leak in the SDP protocol |
Affected by 0 other vulnerabilities. |
|
VCID-jpsm-jcx3-7qbn
Aliases: CVE-2023-27349 |
BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability |
Affected by 0 other vulnerabilities. |
|
VCID-k5ch-vuyv-qbas
Aliases: CVE-2016-7837 |
bluez: Buffer overflow in parse_line function |
Affected by 19 other vulnerabilities. |
|
VCID-m11w-wnaa-r7hb
Aliases: CVE-2022-39176 |
bluez: BlueZ allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len |
Affected by 0 other vulnerabilities. |
|
VCID-mfyz-6q2s-wfgu
Aliases: CVE-2023-50229 |
bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability |
Affected by 0 other vulnerabilities. |
|
VCID-ntmp-nu8h-tuga
Aliases: CVE-2019-8922 |
bluez: heap-based buffer overflow via crafted request |
Affected by 9 other vulnerabilities. |
|
VCID-sj7c-x4nm-eydm
Aliases: CVE-2019-8921 |
bluez: information leak in service_attr_req() in sdpd-request.c via a crafted CSTATE |
Affected by 9 other vulnerabilities. |
|
VCID-w7xy-k5ah-pkhg
Aliases: CVE-2021-0129 |
Multiple vulnerabilities have been discovered in BlueZ, the worst of which could result in arbitrary code execution. |
Affected by 17 other vulnerabilities. Affected by 9 other vulnerabilities. |
|
VCID-xh5e-xqx1-t3eq
Aliases: CVE-2018-10910 |
bluez: failure in disabling Bluetooth discoverability in certain cases may lead to the unauthorized pairing of Bluetooth devices |
Affected by 9 other vulnerabilities. |
|
VCID-yrc6-qjud-zqaf
Aliases: CVE-2017-1000250 |
security update |
Affected by 19 other vulnerabilities. Affected by 17 other vulnerabilities. |
|
VCID-zyyf-565p-h7d6
Aliases: CVE-2020-0556 |
A vulnerability in BlueZ might allow remote attackers to bypass security restrictions. |
Affected by 19 other vulnerabilities. Affected by 17 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-yrc6-qjud-zqaf | security update |
CVE-2017-1000250
|