Skip to content
OpenAdvisories
Medium ALAS2-2023-2167 1 CVE

Moderate: bluez security update (Amazon Linux 2)

Published Jul 20, 2023 · Updated Jul 25, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-0204: A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2 bluez 0:5.44-7.amzn2.0.2
Amazon Linux · 2 bluez-cups 0:5.44-7.amzn2.0.2
Amazon Linux · 2 bluez-debuginfo 0:5.44-7.amzn2.0.2
Amazon Linux · 2 bluez-hid2hci 0:5.44-7.amzn2.0.2
Amazon Linux · 2 bluez-libs 0:5.44-7.amzn2.0.2
Amazon Linux · 2 bluez-libs-devel 0:5.44-7.amzn2.0.2

Vulnerabilities 1

  • High 8.8
    CVE-2022-0204

    A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could…

    bluez bluez Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0204.html