Skip to content
OpenAdvisories
Low ALAS2023-2023-262 1 CVE

Low: bluez security update (Amazon Linux 2023)

Published Jul 17, 2023 · Updated Jul 20, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-3563: A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

Fixed packages 17

ReleasePackageFixed in
Amazon Linux · 2023 bluez 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-cups 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-cups-debuginfo 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-debuginfo 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-debugsource 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-deprecated 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-deprecated-debuginfo 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-hid2hci 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-hid2hci-debuginfo 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-libs 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-libs-debuginfo 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-libs-devel 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-libs-devel-debuginfo 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-mesh 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-mesh-debuginfo 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-obexd 0:5.62-2.amzn2023.0.4
Amazon Linux · 2023 bluez-obexd-debuginfo 0:5.62-2.amzn2023.0.4

Vulnerabilities 1

  • Low 3.5
    CVE-2022-3563

    Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference

    A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereferen…

    Linux kernel bluez bluez Linux Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-3563.html