Search for packages
| purl | pkg:deb/debian/bluez@5.55-3.1%2Bdeb11u1 |
| Next non-vulnerable version | 5.66-1+deb12u2 |
| Latest non-vulnerable version | 5.66-1+deb12u2 |
| Risk | 4.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-15pa-mh4x-13ch
Aliases: CVE-2021-3658 |
bluez: adapter incorrectly restores Discoverable state after powered down |
Affected by 0 other vulnerabilities. |
|
VCID-1d6b-y23m-dqgf
Aliases: CVE-2023-50230 |
bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability |
Affected by 0 other vulnerabilities. |
|
VCID-3fxv-jphd-cyfs
Aliases: CVE-2022-39177 |
bluez: BlueZ allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c |
Affected by 0 other vulnerabilities. |
|
VCID-5kag-2abg-qke2
Aliases: CVE-2022-0204 |
Multiple vulnerabilities have been discovered in BlueZ, the worst of which could result in arbitrary code execution. |
Affected by 0 other vulnerabilities. |
|
VCID-ct1g-g65k-5kfa
Aliases: CVE-2021-43400 |
bluez: use-after-free in gatt-database.c |
Affected by 0 other vulnerabilities. |
|
VCID-g2pd-d2mm-8fd3
Aliases: CVE-2021-41229 |
bluez: memory leak in the SDP protocol |
Affected by 0 other vulnerabilities. |
|
VCID-jpsm-jcx3-7qbn
Aliases: CVE-2023-27349 |
BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability |
Affected by 0 other vulnerabilities. |
|
VCID-m11w-wnaa-r7hb
Aliases: CVE-2022-39176 |
bluez: BlueZ allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len |
Affected by 0 other vulnerabilities. |
|
VCID-mfyz-6q2s-wfgu
Aliases: CVE-2023-50229 |
bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-6d8c-y2y7-t3cj | Multiple vulnerabilities have been discovered in BlueZ, the worst of which could result in arbitrary code execution. |
CVE-2021-3588
|
| VCID-72rt-6t6r-87a8 | Multiple vulnerabilities have been discovered in Bluez, the worst of which can lead to privilege escalation. |
CVE-2023-45866
|
| VCID-9317-anru-ekes | A vulnerability in BlueZ might allow remote attackers to execute arbitrary code. |
CVE-2020-27153
|
| VCID-ctaf-8vuf-tqgg | Multiple vulnerabilities have been discovered in BlueZ, the worst of which could result in arbitrary code execution. |
CVE-2020-26558
|
| VCID-ntmp-nu8h-tuga | bluez: heap-based buffer overflow via crafted request |
CVE-2019-8922
|
| VCID-sj7c-x4nm-eydm | bluez: information leak in service_attr_req() in sdpd-request.c via a crafted CSTATE |
CVE-2019-8921
|
| VCID-w7xy-k5ah-pkhg | Multiple vulnerabilities have been discovered in BlueZ, the worst of which could result in arbitrary code execution. |
CVE-2021-0129
|
| VCID-xh5e-xqx1-t3eq | bluez: failure in disabling Bluetooth discoverability in certain cases may lead to the unauthorized pairing of Bluetooth devices |
CVE-2018-10910
|