Known Vulnerabilities for products from Bluez
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Bluez".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-39177 json | BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabiliti... | Not Provided | 2022-09-02 | 2026-04-15 |
| CVE-2022-39176 json | BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does n... | Not Provided | 2022-09-02 | 2026-04-15 |
| CVE-2022-3637 json | A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_i... | 5.5 - MEDIUM | 2022-10-21 | 2023-09-22 |
| CVE-2022-3563 json | A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_com... | 5.7 - MEDIUM | 2022-10-17 | 2023-11-07 |
| CVE-2022-0204 json | A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass ... | Not Provided | 2022-03-10 | 2026-04-15 |
| CVE-2021-43400 json | An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D-Bus p... | 9.1 - CRITICAL | 2021-11-04 | 2022-11-07 |
| CVE-2021-41229 json | BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allo... | 6.5 - MEDIUM | 2021-11-12 | 2022-11-07 |
| CVE-2021-3658 json | bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when pow... | Not Provided | 2022-03-02 | 2026-04-15 |
| CVE-2021-3588 json | The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using i... | 3.3 - LOW | 2021-06-10 | 2022-10-29 |
| CVE-2021-0129 json | Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent ac... | 5.7 - MEDIUM | 2021-06-09 | 2022-10-29 |
| CVE-2020-27153 json | In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker co... | Not Provided | 2020-10-15 | 2026-04-15 |
| CVE-2020-24490 json | Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent ... | 6.5 - MEDIUM | 2021-02-02 | 2021-07-21 |
| CVE-2020-12352 json | Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent ... | 6.5 - MEDIUM | 2020-11-23 | 2022-08-12 |
| CVE-2020-0556 json | Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable es... | 7.1 - HIGH | 2020-03-12 | 2022-04-22 |
| CVE-2019-8922 json | A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is en... | Not Provided | 2021-11-29 | 2026-04-15 |
| CVE-2019-8921 json | An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ by the ... | Not Provided | 2021-11-29 | 2026-04-15 |
| CVE-2018-10910 json | A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the ... | 3.3 - LOW | 2019-01-28 | 2023-02-13 |
| CVE-2017-1000250 json | All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allo... | 6.5 - MEDIUM | 2017-09-12 | 2018-02-17 |
| CVE-2016-9917 json | In BlueZ 5.42, a buffer overflow was observed in "read_n" function in "tools/hcidump.c" source file. This issue can be trigge... | Not Provided | 2016-12-08 | 2026-05-06 |
| CVE-2016-9804 json | In BlueZ 5.42, a buffer overflow was observed in "commands_dump" function in "tools/parser/csr.c" source file. The issue exis... | Not Provided | 2016-12-03 | 2026-05-06 |
Known software with vulnerabilities from Bluez
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Bluez | Bluez | - |