Summary
It was discovered that BlueZ incorrectly validated certain capabilities
and lengths when handling the A2DP profile. A remote attacker could use
this issue to cause BlueZ to crash, resulting in a denial of service, or
possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | bluez | 5.48-0ubuntu3.9 |
| Ubuntu · 20.04 LTS 20.04:LTS | bluez | 5.53-0ubuntu3.6 |
References
-
report
https://launchpad.net/bugs/1977968