Skip to content
OpenAdvisories
Medium ALAS2023-2023-212 1 CVE

Moderate: bluez security update (Amazon Linux 2023)

Published Jun 7, 2023 · Updated Jun 12, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-0204: A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.

Fixed packages 17

ReleasePackageFixed in
Amazon Linux · 2023 bluez 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-cups 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-cups-debuginfo 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-debuginfo 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-debugsource 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-deprecated 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-deprecated-debuginfo 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-hid2hci 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-hid2hci-debuginfo 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-libs 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-libs-debuginfo 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-libs-devel 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-libs-devel-debuginfo 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-mesh 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-mesh-debuginfo 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-obexd 0:5.62-2.amzn2023.0.3
Amazon Linux · 2023 bluez-obexd-debuginfo 0:5.62-2.amzn2023.0.3

Vulnerabilities 1

  • High 8.8
    CVE-2022-0204

    A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could…

    bluez bluez Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0204.html