Red Hat Security AdvisoryRHSA-2024:9413
bluez security update
Released 2024-11-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) bluez-libs-devel-5.72-2.el9
- Red Hat Enterprise Linux AppStream (v. 9) bluez-cups-5.72-2.el9, bluez-obexd-5.72-2.el9
- Red Hat Enterprise Linux BaseOS (v. 9) bluez-5.72-2.el9, bluez-libs-5.72-2.el9
Fixes 10 records
Priority MEDIUM 41
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.0· Adjacent network · No auth · User interaction · EPSS 0.0229 · Published 2024-05-03 · Partial fix CWE-122
Priority MEDIUM 40
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.0· Adjacent network · No auth · User interaction · EPSS 0.01493 · Published 2024-05-03 · Partial fix CWE-122
Priority MEDIUM 40
BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.0· Adjacent network · No auth · User interaction · EPSS 0.01563 · Published 2024-05-03 · Partial fix CWE-121
Priority MEDIUM 40
BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.0· Adjacent network · No auth · User interaction · EPSS 0.01427 · Published 2024-05-03 · Partial fix CWE-129
Priority LOW 39
Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages w…
CVSS 3.1MEDIUM 6.3· Adjacent network · No auth · No interaction · EPSS 0.07879 · Published 2023-12-08 · Partial fix CWE-287
Priority LOW 36
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.1· Adjacent network · No auth · User interaction · EPSS 0.01506 · Published 2024-05-03 · Partial fix CWE-122
Priority LOW 29
BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 5.7· Adjacent network · No auth · User interaction · EPSS 0.00808 · Published 2024-05-03 · Partial fix CWE-125
Priority LOW 29
BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 5.7· Adjacent network · No auth · User interaction · EPSS 0.00956 · Published 2024-05-03 · Partial fix CWE-125
Priority LOW 28
BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 5.7· Adjacent network · No auth · User interaction · EPSS 0.01079 · Published 2024-05-03 · Partial fix CWE-125
Priority LOW 27
BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 5.7· Adjacent network · No auth · User interaction · EPSS 0.0083 · Published 2024-05-03 · Partial fix CWE-125