Skip to content
OpenAdvisories
Medium ELSA-2025-4043 2 CVEs

Moderate: bluez security update (Oracle Linux 8)

Published Apr 21, 2025 · Updated Apr 21, 2025

Ecosystem: Oracle Linux

Summary

[5.63-5]
+ bluez-5.63-5
- Resolves: RHEL-35371
- Fixing CVE-2023-27349
- Resolves: RHEL-35492
- Fixing CVE-2023-51589

[5.63-4]
+ bluez-5.63-4
- Resolves: RHEL-35501
- Fixing CVE-2023-50230
- Resolves: RHEL-35504
- Fixing CVE-2023-50229

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 8 bluez 0:5.63-5.el8_10
Oracle Linux · 8 bluez-cups 0:5.63-5.el8_10
Oracle Linux · 8 bluez-hid2hci 0:5.63-5.el8_10
Oracle Linux · 8 bluez-libs 0:5.63-5.el8_10
Oracle Linux · 8 bluez-libs-devel 0:5.63-5.el8_10
Oracle Linux · 8 bluez-obexd 0:5.63-5.el8_10

Vulnerabilities 2

  • High 7.1
    CVE-2023-27349

    BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability

    BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to …

    BlueZ BlueZ bluez bluez Debian Ubuntu
  • Medium 5.4
    CVE-2023-51589

    BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability

    BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is…

    BlueZ BlueZ bluez bluez Debian Ubuntu Azure Linux