Summary
Ein Angreifer kann mehrere Schwachstellen in bluez ausnutzen, um einen Denial of Service Angriff durchzuführen oder möglicherweise beliebigen Code auszuführen.
Product
BlueZ ist ein Protokollstack für den Bluetooth-Funkstandard für Linux.
Vulnerabilities 2
-
High 7.6
Bluez: stack overflow in name2utf8 causes dos and potential code execution
A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response (EIR) packet that causes a buffer overflow when the target devic…
-
Medium 5.7
Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root
BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash blu…
Revision history
-
#3
Neue Updates von Ubuntu aufgenommen
-
#2
Neue Updates von Ubuntu aufgenommen
-
#1
Initiale Fassung
References
-
GitHub Security Advisory GHSA-822R-M33H-GR5V vom 2026-08-25
https://github.com/advisories/GHSA-822R-M33H-GR5V
-
Red Hat Customer Portal CVE-2026-80185 vom 2026-08-25
https://access.redhat.com/security/cve/cve-2026-80185
-
Red Hat Bugtracker 2524139 vom 2026-08-25
https://bugzilla.redhat.com/show_bug.cgi?id=2524139
-
GitHub Security Advisory GHSA-F784-6479-V89P vom 2026-08-25
https://github.com/advisories/GHSA-F784-6479-V89P
-
Red Hat Customer Portal CVE-2026-80186 vom 2026-08-25
https://access.redhat.com/security/cve/cve-2026-80186
-
Red Hat Bugtracker 2524132 vom 2026-08-25
https://bugzilla.redhat.com/show_bug.cgi?id=2524132
-
Ubuntu Security Notice USN-8908-1 vom 2026-10-09
https://ubuntu.com/security/notices/USN-8908-1
-
Ubuntu Security Notice USN-8908-2 vom 2026-10-14
https://ubuntu.com/security/notices/USN-8908-2