Skip to content
OpenAdvisories
High USN-5275-1 1 CVE

bluez vulnerability

Published Feb 8, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

Ziming Zhang discovered that BlueZ incorrectly handled memory write operations
in its gatt server. A remote attacker could possibly use this to cause BlueZ to
crash leading to a denial of service, or potentially remotely execute code.
(CVE-2022-0204)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS bluez 5.48-0ubuntu3.8
Ubuntu · 20.04 LTS 20.04:LTS bluez 5.53-0ubuntu3.5
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS bluez 5.37-0ubuntu5.3+esm2

Vulnerabilities 1

  • High 8.8
    CVE-2022-0204

    A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could…

    bluez bluez Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-0204