Description
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
References
https://bugzilla.redhat.com/show_bug.cgi?id=2039807
https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0
https://github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q
https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html
https://security.gentoo.org/glsa/202209-16
https://bugzilla.redhat.com/show_bug.cgi?id=2039807
https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0
https://github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q
https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html
https://security.gentoo.org/glsa/202209-16
CVSS impact metrics
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.8 · High
Information
Source identifier
Vulnerability status
Modified
Published
2022-03-10T16:44:55.230Z
4 years agoLast modified
2025-11-04T15:15:46.130Z
4 months ago