A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade bluez-libs-debuginfoUpgrade bluez-obexd-debuginfoUpgrade bluez-libsUpgrade bluez-cups-debuginfoUpgrade bluez-hid2hciUpgrade bluezUpgrade bluez-obexdUpgrade bluez-libs-develUpgrade bluez-cupsUpgrade bluez-debugsourceUpgrade bluez-hid2hci-debuginfoUpgrade bluez-debuginfo | Apr 1, 2020 | Jan 28, 2019 |
| Debian | — | Upgrade bluez | Jul 30, 2024 | Jan 28, 2019 |
| Oracle_linux | — | Upgrade bluez-hid2hciUpgrade bluezUpgrade bluez-libsUpgrade bluez-obexdUpgrade bluez-libs-develUpgrade bluez-cups | Oct 5, 2022 | Jul 20, 2018 |
| Redhat_linux | — | Upgrade bluez-obexd-debuginfoUpgrade bluez-hid2hci-debuginfoUpgrade bluezUpgrade bluez-libs-develUpgrade bluez-obexdUpgrade bluez-debugsourceUpgrade bluez-libs-debuginfoUpgrade bluez-hid2hciUpgrade bluez-cupsUpgrade bluez-cups-debuginfoUpgrade bluez-libsUpgrade bluez-debuginfo | Apr 1, 2020 | Jan 28, 2019 |
| Ubuntu | — | Upgrade libgnome-bluetooth13Upgrade gnome-bluetooth | Jan 23, 2019 | Jan 14, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub