rpm package
opensuse/bluez&distro=openSUSE Leap Micro 5.4
pkg:rpm/opensuse/bluez&distro=openSUSE%20Leap%20Micro%205.4
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-50230 | — | < 5.62-150400.4.19.1 | 5.62-150400.4.19.1 | May 3, 2024 | BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that th | ||
| CVE-2023-50229 | — | < 5.62-150400.4.19.1 | 5.62-150400.4.19.1 | May 3, 2024 | BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that th | ||
| CVE-2021-41229 | — | < 5.62-150400.4.16.1 | 5.62-150400.4.16.1 | Nov 12, 2021 | BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be |
- CVE-2023-50230May 3, 2024affected < 5.62-150400.4.19.1fixed 5.62-150400.4.19.1
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that th
- CVE-2023-50229May 3, 2024affected < 5.62-150400.4.19.1fixed 5.62-150400.4.19.1
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that th
- CVE-2021-41229Nov 12, 2021affected < 5.62-150400.4.16.1fixed 5.62-150400.4.16.1
BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be