Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | bluez | 5.50-1.2~deb10u3 |
Vulnerabilities 7
-
High 8.8
A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there…
-
High 8.8
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could…
-
High 8.8
BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c …
-
High 8.8
BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capa…
-
Medium 6.5
An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ b…
-
Medium 4.3
Memory leak in BlueZ
BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over …
-
Unscored —
An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D…