The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bluez-libs-develUpgrade bluez-cupsUpgrade bluez-obexdUpgrade bluez-libsUpgrade bluezUpgrade bluez-hid2hci | May 13, 2022 | Nov 12, 2021 |
| Alpine Linux | — | Upgrade bluez | Mar 21, 2024 | Nov 12, 2021 |
| Centos_linux | — | Upgrade bluez-libs-debuginfoUpgrade bluezUpgrade bluez-hid2hciUpgrade bluez-cups-debuginfoUpgrade bluez-obexd-debuginfoUpgrade bluez-debugsourceUpgrade bluez-hid2hci-debuginfoUpgrade bluez-cupsUpgrade bluez-obexdUpgrade bluez-libsUpgrade bluez-debuginfo | May 13, 2022 | Nov 12, 2021 |
| Debian | — | Upgrade bluez | Nov 29, 2021 | Nov 12, 2021 |
| Oracle_linux | — | Upgrade bluez-libs-develUpgrade bluez-libsUpgrade bluez-obexdUpgrade bluez-hid2hciUpgrade bluez-cupsUpgrade bluez | May 18, 2022 | Nov 12, 2021 |
| Redhat_linux | — | Upgrade bluezUpgrade bluez-libs-debuginfoUpgrade bluez-cups-debuginfoUpgrade bluez-obexd-debuginfoUpgrade bluez-hid2hciUpgrade bluez-cupsUpgrade bluez-libs-develUpgrade bluez-debuginfoUpgrade bluez-debugsourceNo solution existsUpgrade bluez-libsUpgrade bluez-obexdUpgrade bluez-hid2hci-debuginfo | May 13, 2022 | Nov 12, 2021 |
| Rocky_linux | — | Upgrade bluez-cupsUpgrade bluez-debugsourceUpgrade bluez-debuginfoUpgrade bluez-hid2hci-debuginfoUpgrade bluez-libs-develUpgrade bluezUpgrade bluez-libs-debuginfoUpgrade bluez-libsUpgrade bluez-hid2hciUpgrade bluez-cups-debuginfoUpgrade bluez-obexd-debuginfoUpgrade bluez-obexd | Mar 5, 2024 | Nov 12, 2021 |
| Suse | — | Upgrade bluezUpgrade libbluetooth3-32bitUpgrade bluez-auto-enable-devicesUpgrade bluez-develUpgrade bluez-testUpgrade bluez-deprecatedUpgrade bluez-cupsUpgrade libbluetooth3Upgrade bluez-devel-32bit | Aug 9, 2024 | Nov 12, 2021 |
| Ubuntu | — | Upgrade libbluetooth3Upgrade bluez | Nov 24, 2021 | Nov 12, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 12, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub