Skip to content
OpenAdvisories
Medium WID-SEC-2023-3209 6 CVEs

bluez: Mehrere Schwachstellen

Published Dec 21, 2023 · Updated Apr 22, 2025 · Revision 5 · de-DE

Vendor: Fedora Vendor: Oracle Vendor: Red Hat Product: Enterprise Linux Product: Linux Product: Linux Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in bluez ausnutzen, um beliebigen Programmcode auszuführen und Informationen offenzulegen.

Product

BlueZ ist ein Protokollstack für den Bluetooth-Funkstandard für Linux.

Vulnerabilities 6

  • High 7.1
    CVE-2023-44431

    BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability

    BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit…

    BlueZ BlueZ bluez bluez Debian Ubuntu
  • High 7.1
    CVE-2023-51596

    BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability

    BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vul…

    BlueZ BlueZ bluez bluez Debian Ubuntu
  • Medium 5.4
    CVE-2023-51580

    BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability

    BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interac…

    BlueZ BlueZ bluez bluez Debian Ubuntu Azure Linux
  • Medium 5.4
    CVE-2023-51589

    BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability

    BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is…

    BlueZ BlueZ bluez bluez Debian Ubuntu Azure Linux
  • Medium 5.4
    CVE-2023-51592

    BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability

    BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is …

    BlueZ BlueZ bluez bluez Debian Ubuntu Azure Linux
  • Low 2.6
    CVE-2023-51594

    BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability

    BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of BlueZ. User interaction is required to exploit this vulnerability i…

    BlueZ BlueZ bluez bluez Debian Ubuntu

Revision history

  1. #5

    Neue Updates von Oracle Linux aufgenommen

  2. #4

    Neue Updates von Red Hat aufgenommen

  3. #3

    Neue Updates von Fedora aufgenommen

  4. #2

    Neue Updates von Red Hat aufgenommen

  5. #1

    Initiale Fassung

References