Known Vulnerabilities for products from Bluez
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Bluez".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-0204 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.8 - HIGH | 2022-03-10 | 2023-06-26 |
| CVE-2021-43400 | An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D-Bus p... | 9.1 - CRITICAL | 2021-11-04 | 2022-11-07 |
| CVE-2021-41229 | BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allo... | 6.5 - MEDIUM | 2021-11-12 | 2022-11-07 |
| CVE-2021-3658 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.5 - MEDIUM | 2022-03-02 | 2022-06-03 |
| CVE-2021-3588 | The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using i... | 3.3 - LOW | 2021-06-10 | 2022-10-29 |
| CVE-2021-0129 | Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent ac... | 5.7 - MEDIUM | 2021-06-09 | 2022-10-29 |
| CVE-2020-27153 | In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker co... | 8.6 - HIGH | 2020-10-15 | 2022-04-05 |
| CVE-2020-24490 | Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent ... | 6.5 - MEDIUM | 2021-02-02 | 2021-07-21 |
| CVE-2020-12352 | Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent ... | 6.5 - MEDIUM | 2020-11-23 | 2022-08-12 |
| CVE-2020-0556 | Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable es... | 7.1 - HIGH | 2020-03-12 | 2022-04-22 |
| CVE-2019-8922 | A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is en... | 8.8 - HIGH | 2021-11-29 | 2022-11-07 |
| CVE-2019-8921 | An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ by the ... | 6.5 - MEDIUM | 2021-11-29 | 2022-11-07 |
| CVE-2018-10910 | A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the ... | 3.3 - LOW | 2019-01-28 | 2023-02-13 |
| CVE-2017-1000250 | All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allo... | 6.5 - MEDIUM | 2017-09-12 | 2018-02-17 |
| CVE-2016-9917 | In BlueZ 5.42, a buffer overflow was observed in "read_n" function in "tools/hcidump.c" source file. This issue can be trigge... | 7.5 - HIGH | 2016-12-08 | 2019-12-19 |
| CVE-2016-9804 | In BlueZ 5.42, a buffer overflow was observed in "commands_dump" function in "tools/parser/csr.c" source file. The issue exis... | 5.3 - MEDIUM | 2016-12-03 | 2016-12-07 |
| CVE-2016-9803 | In BlueZ 5.42, an out-of-bounds read was observed in "le_meta_ev_dump" function in "tools/parser/hci.c" source file. This iss... | 5.3 - MEDIUM | 2016-12-03 | 2016-12-07 |
| CVE-2016-9802 | In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file. This issue can... | 5.3 - MEDIUM | 2016-12-03 | 2019-05-30 |
| CVE-2016-9801 | In BlueZ 5.42, a buffer overflow was observed in "set_ext_ctrl" function in "tools/parser/l2cap.c" source file when processin... | 5.3 - MEDIUM | 2016-12-03 | 2016-12-07 |
| CVE-2016-9800 | In BlueZ 5.42, a buffer overflow was observed in "pin_code_reply_dump" function in "tools/parser/hci.c" source file. The issu... | 5.3 - MEDIUM | 2016-12-03 | 2016-12-07 |
Known software with vulnerabilities from Bluez
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Bluez | Bluez | - |