BL
Product
BlueZ
38
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 15Medium 20Low 2
Watch
Add BlueZ to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3658 | 6.5 | Mar 2 | bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up Affected: before 5.61 |
| CVE-2019-8921 | 6.5 | Nov 29 | An issue was discovered in bluetoothd in BlueZ through 5.48 Affected: through 5.48 |
| CVE-2021-41229 | 6.5 | Nov 12 | BlueZ is a Bluetooth protocol stack for Linux Affected: 5.58 |
| CVE-2020-24490 | 6.5 | Feb 2 | Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access Affected: All versions, or not specified |
| CVE-2017-1000250 | 6.5 | Sep 12 | All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information… Affected: through 5.46 |
| CVE-2023-51594 | 5.7 | May 3 | BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability Affected: 5.66 |
| CVE-2023-51592 | 5.7 | May 3 | BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability Affected: 5.66 |
| CVE-2023-51589 | 5.7 | May 3 | BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability Affected: 5.66 |
| CVE-2023-51580 | 5.7 | May 3 | BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability Affected: 5.66 |
| CVE-2022-3563 | 5.7 | Oct 17 | Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference Affected: before 5.65 |
| CVE-2021-0129 | 5.7 | Jun 9 | Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access Affected: before 5.57 |
| CVE-2022-3637 | 5.5 | Oct 21 | Linux Kernel BlueZ jlink.c jlink_init denial of service Affected: before 5.65 |
| CVE-2016-9804 | 5.3 | Dec 3 | In BlueZ 5.42, a buffer overflow was observed in "commands_dump" function in "tools/parser/csr.c" source file Affected: 5.42 |
| CVE-2016-9803 | 5.3 | Dec 3 | In BlueZ 5.42, an out-of-bounds read was observed in "le_meta_ev_dump" function in "tools/parser/hci.c" source file Affected: 5.42 |
| CVE-2016-9802 | 5.3 | Dec 3 | In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file Affected: 5.42 |
| CVE-2016-9801 | 5.3 | Dec 3 | In BlueZ 5.42, a buffer overflow was observed in "set_ext_ctrl" function in "tools/parser/l2cap.c" source file when processing corrupted dump file Affected: 5.42 |
| CVE-2016-9800 | 5.3 | Dec 3 | In BlueZ 5.42, a buffer overflow was observed in "pin_code_reply_dump" function in "tools/parser/hci.c" source file Affected: 5.42 |
| CVE-2016-9799 | 5.3 | Dec 3 | In BlueZ 5.42, a buffer overflow was observed in "pklg_read_hci" function in "btsnoop.c" source file Affected: 5.42 |
| CVE-2016-9798 | 5.3 | Dec 3 | In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c" source file Affected: 5.42 |
| CVE-2016-9797 | 5.3 | Dec 3 | In BlueZ 5.42, a buffer over-read was observed in "l2cap_dump" function in "tools/parser/l2cap.c" source file Affected: 5.42 |
Showing 20