Read the docs
Red Hat Security Advisory

RHSA-2024:9413

bluez security update

Released 2024-11-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 10 records

TI-2023-27461 CVE-2023-50229 · GHSA-5p3x-h55j-m7f2

Heap-based buffer overflow in BlueZ

Priority MEDIUM 41

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.0229 Published 2024-05-03 Partial fix CWE-122
TI-2023-27462 CVE-2023-50230 · GHSA-w9r2-6h22-p3p7

Heap-based buffer overflow in BlueZ

Priority MEDIUM 40

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.01493 Published 2024-05-03 Partial fix CWE-122
TI-2023-23937 CVE-2023-44431 · GHSA-crgw-4rjj-j4j9

Stack-based buffer overflow in BlueZ

Priority MEDIUM 40

BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.01563 Published 2024-05-03 Partial fix CWE-121
TI-2023-12084 CVE-2023-27349 · GHSA-r3vg-5hjq-528v

Improper array index validation in BlueZ

Priority MEDIUM 40

BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.01427 Published 2024-05-03 Partial fix CWE-129
Priority LOW 39

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages w…

CVSS 3.1MEDIUM 6.3 Adjacent network No auth No interaction EPSS 0.07879 Published 2023-12-08 Partial fix CWE-287
TI-2023-28248 CVE-2023-51596 · GHSA-82h5-h894-mpr2

Heap-based buffer overflow in BlueZ

Priority LOW 36

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.1 Adjacent network No auth User interaction EPSS 0.01506 Published 2024-05-03 Partial fix CWE-122
TI-2023-28244 CVE-2023-51592 · GHSA-ww65-6xhp-hx58

Out-of-bounds read in BlueZ

Priority LOW 29

BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00808 Published 2024-05-03 Partial fix CWE-125
TI-2023-28232 CVE-2023-51580 · GHSA-wpgw-gr5r-5jqv

Out-of-bounds read in BlueZ

Priority LOW 29

BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00956 Published 2024-05-03 Partial fix CWE-125
TI-2023-28246 CVE-2023-51594 · GHSA-jh7h-h9f3-3339

Out-of-bounds read in BlueZ

Priority LOW 28

BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.01079 Published 2024-05-03 Partial fix CWE-125
TI-2023-28241 CVE-2023-51589 · GHSA-jj24-rmrj-3hr4

Out-of-bounds read in BlueZ

Priority LOW 27

BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.0083 Published 2024-05-03 Partial fix CWE-125