Skip to content
OpenAdvisories
High DLA-2827-1 3 CVEs

bluez - security update

Published Nov 27, 2021 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 bluez 5.43-2+deb9u5

Vulnerabilities 3

  • High 8.8

    A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there…

  • Medium 6.5

    An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ b…

  • Medium 4.3

    Memory leak in BlueZ

    BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over …