A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bluez | Mar 21, 2024 | Mar 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bluezUpgrade bluez-libsUpgrade bluez-debuginfoUpgrade bluez-cupsUpgrade bluez-libs-develUpgrade bluez-hid2hci | Jul 27, 2023 | Mar 10, 2022 |
| Amazon_linux_2023 | — | Upgrade bluez-mesh-debuginfoUpgrade bluez-libsUpgrade bluez-libs-devel-debuginfoUpgrade bluez-libs-debuginfoUpgrade bluez-cupsUpgrade bluez-hid2hciUpgrade bluezUpgrade bluez-debuginfoUpgrade bluez-cups-debuginfoUpgrade bluez-deprecatedUpgrade bluez-debugsourceUpgrade bluez-obexd-debuginfoUpgrade bluez-deprecated-debuginfoUpgrade bluez-obexdUpgrade bluez-libs-develUpgrade bluez-hid2hci-debuginfoUpgrade bluez-mesh | Feb 17, 2025 | Nov 12, 2021 |
| Debian | — | Upgrade bluez | Oct 25, 2022 | Mar 10, 2022 |
| Gentoo Linux | — | Upgrade net-wireless/bluez. | Sep 30, 2022 | Mar 10, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade bluez-help | Jun 7, 2022 | Mar 10, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade bluez-libsUpgrade bluez | May 25, 2022 | Mar 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bluez-libsUpgrade bluez-libs-develUpgrade bluez | Jun 17, 2022 | Mar 10, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bluezUpgrade bluez-libsUpgrade bluez-hid2hciUpgrade bluez-obexdUpgrade bluez-libs-devel | Apr 26, 2022 | Mar 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade bluez-help | Jun 16, 2022 | Mar 10, 2022 |
| Suse | — | Upgrade bluez-develUpgrade bluezUpgrade bluez-zsh-completionUpgrade libbluetooth3-32bitUpgrade bluez-cupsUpgrade bluez-testUpgrade bluez-devel-32bitUpgrade libbluetooth3Upgrade bluez-auto-enable-devicesUpgrade bluez-deprecated | Oct 26, 2022 | Mar 10, 2022 |
| Ubuntu | — | Upgrade bluez (Ubuntu Pro)Upgrade bluezUpgrade libbluetooth3Upgrade libbluetooth3 (Ubuntu Pro) | Feb 9, 2022 | Feb 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub