TI-2018-07722 CVE-2018-10910 · GHSA-62rf-fp64-gxpc
Incorrect authorization in bluez
Priority LOW 21
A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system.
Vulnerabilities
6 records
TI-2016-06586 CVE-2016-7837 · GHSA-rqrx-f2rh-m32q
Memory corruption in BlueZ
Priority LOW 35
Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.
TI-2016-08037 CVE-2016-9918 · GHSA-wv4g-wq9q-gp9j
In BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump" function in…
Priority LOW 39
In BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump" function in "monitor/packet.c" source file.
TI-2006-06642 CVE-2006-6899 · GHSA-3c54-jw9j-cwjh
hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the…
Priority LOW 30
hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a serv…
TI-2006-00649 CVE-2006-0670 · GHSA-fm8c-whcx-jx6x
Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of…
Priority LOW 29
Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.
TI-2005-02412 CVE-2005-2547 · GHSA-35vq-2ggj-6fwg
security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute…
Priority LOW 37
security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper.