BlueZ 5.54

CPE Details

BlueZ 5.54
bluez
bluez
5.54
2020-03-18
16h43 +00:00
2020-03-18
16h43 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:bluez:bluez:5.54:*:*:*:*:*:*:*

Informations

Vendor

bluez

Product

bluez

Version

5.54

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-3637 2022-10-20 22h00 +00:00 A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211936.
5.5
Medium
CVE-2022-3563 2022-10-16 22h00 +00:00 A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.
5.7
Medium
CVE-2022-39176 2022-09-01 22h00 +00:00 BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.
8.8
High
CVE-2022-39177 2022-09-01 22h00 +00:00 BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c.
8.8
High
CVE-2022-0204 2022-03-08 23h00 +00:00 A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
8.8
High
CVE-2021-3658 2022-03-02 21h11 +00:00 bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.
6.5
Medium
CVE-2021-3588 2021-06-10 02h30 +00:00 The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading.
3.3
Low
CVE-2021-0129 2021-06-09 17h50 +00:00 Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.
5.7
Medium
CVE-2020-12352 2020-11-23 15h15 +00:00 Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
6.5
Medium
CVE-2020-27153 2020-10-15 00h53 +00:00 In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.
8.6
High