Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
bluez bluez vulnerabilities and exploits
(subscribe to this query)
294
VMScore
CVE-2019-8921
An issue exists in bluetoothd in BlueZ up to and including 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning more bytes than the buffer actually holds, result...
Bluez Bluez
Debian Debian Linux 10.0
516
VMScore
CVE-2019-8922
A heap-based buffer overflow exists in bluetoothd in BlueZ up to and including 5.48. There isn't any check on whether there is enough space in the destination buffer. The function simply appends all data passed to it. The values of all attributes that are requested are appen...
Bluez Bluez
Debian Debian Linux 10.0
570
VMScore
CVE-2021-43400
An issue exists in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D-Bus processing of a WriteValue call.
Bluez Bluez 5.61
Debian Debian Linux 10.0
516
VMScore
CVE-2022-0204
A heap overflow vulnerability was found in bluez in versions before 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
Bluez Bluez
Fedoraproject Fedora 35
Debian Debian Linux 10.0
294
VMScore
CVE-2021-41229
BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be...
Bluez Bluez 5.58
Debian Debian Linux 9.0
Debian Debian Linux 10.0
NA
CVE-2022-39176
BlueZ prior to 5.59 allows physically proximate malicious users to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.
Bluez Bluez
Canonical Ubuntu Linux 18.04
Canonical Ubuntu Linux 20.04
Debian Debian Linux 10.0
NA
CVE-2022-39177
BlueZ prior to 5.59 allows physically proximate malicious users to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c.
Bluez Bluez
Canonical Ubuntu Linux 18.04
Canonical Ubuntu Linux 20.04
Debian Debian Linux 10.0
240
VMScore
CVE-2021-0129
Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.
Bluez Bluez
Redhat Enterprise Linux 7.0
Redhat Enterprise Linux 8.0
Debian Debian Linux 9.0
668
VMScore
CVE-2020-27153
In BlueZ prior to 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.
Bluez Bluez
Debian Debian Linux 9.0
Debian Debian Linux 10.0
Opensuse Leap 15.1
Opensuse Leap 15.2
445
VMScore
CVE-2006-0670
Buffer overflow in l2cap.c in hcidump 1.29 allows remote malicious users to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.
Bluez Project Hcidump 1.29
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »