Search CVE reports


Toggle filters

21 – 30 of 66 results


CVE-2022-25836

Medium priority
Vulnerable

Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when the MITM negotiates Legacy Passkey Pairing...

180 affected packages

bluez, linux, linux-aws, linux-azure, linux-azure-fde...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez Ignored Ignored Ignored Ignored Ignored
linux Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable
linux-aws Ignored Ignored Ignored Ignored Ignored
linux-azure Ignored Ignored Ignored Ignored Ignored
linux-azure-fde Ignored Ignored Ignored Ignored Not in release
linux-gcp Ignored Ignored Ignored Ignored Ignored
linux-gke Needs evaluation Ignored Ignored Ignored Not in release
linux-oracle Ignored Ignored Ignored Ignored Ignored
linux-raspi Ignored Ignored Ignored Ignored Not in release
linux-riscv Ignored Ignored Ignored Ignored Not in release
linux-realtime Ignored Ignored Ignored Not in release Not in release
linux-nvidia-bos Needs evaluation Not in release Not in release Not in release Not in release
linux-nvidia-7.0 Not in release Needs evaluation Not in release Not in release Not in release
linux-hwe-7.0 Not in release Vulnerable Not in release Not in release Not in release
linux-oem-7.0 Vulnerable Not in release Not in release Not in release Not in release
linux-aws-7.0 Not in release Ignored Not in release Not in release Not in release
linux-riscv-7.0 Not in release Ignored Not in release Not in release Not in release
linux-azure-7.0 Not in release Ignored Not in release Not in release Not in release
linux-azure-fde-7.0 Not in release Ignored Not in release Not in release Not in release
linux-gcp-7.0 Not in release Ignored Not in release Not in release Not in release
linux-oracle-7.0 Not in release Ignored Not in release Not in release Not in release
linux-allwinner Not in release Not in release Not in release Not in release Not in release
linux-allwinner-5.19 Not in release Not in release Ignored Not in release Not in release
linux-aws-5.0 Not in release Not in release Not in release Not in release Ignored
linux-aws-5.11 Not in release Not in release Not in release Ignored Not in release
linux-aws-5.13 Not in release Not in release Not in release Ignored Not in release
linux-aws-5.15 Not in release Not in release Not in release Ignored Not in release
linux-aws-5.19 Not in release Not in release Ignored Not in release Not in release
linux-aws-5.3 Not in release Not in release Not in release Not in release Ignored
linux-aws-5.4 Not in release Not in release Not in release Not in release Ignored
linux-aws-5.8 Not in release Not in release Not in release Ignored Not in release
linux-aws-6.14 Not in release Ignored Not in release Not in release Not in release
linux-aws-6.17 Not in release Ignored Not in release Not in release Not in release
linux-aws-6.2 Not in release Not in release Ignored Not in release Not in release
linux-aws-6.5 Not in release Not in release Ignored Not in release Not in release
linux-aws-6.8 Not in release Not in release Ignored Not in release Not in release
linux-aws-fips Not in release Ignored Ignored Ignored Ignored
linux-aws-hwe Not in release Not in release Not in release Not in release Not in release
linux-azure-4.15 Not in release Not in release Not in release Not in release Ignored
linux-azure-5.11 — — Not in release Ignored Not in release
linux-azure-5.13 Not in release Not in release Not in release Ignored Not in release
linux-azure-5.15 Not in release Not in release Not in release Ignored Not in release
linux-azure-5.19 Not in release Not in release Ignored Not in release Not in release
linux-azure-5.3 Not in release Not in release Not in release Not in release Ignored
linux-azure-5.4 Not in release Not in release Not in release Not in release Ignored
linux-azure-5.8 Not in release Not in release Not in release Ignored Not in release
linux-azure-6.11 Not in release Ignored Not in release Not in release Not in release
linux-azure-6.14 Not in release Ignored Not in release Not in release Not in release
linux-azure-6.17 Not in release Ignored Not in release Not in release Not in release
linux-azure-6.2 Not in release Not in release Ignored Not in release Not in release
linux-azure-6.5 Not in release Not in release Ignored Not in release Not in release
linux-azure-6.8 Not in release Not in release Ignored Not in release Not in release
linux-azure-edge Not in release Not in release Not in release Not in release Ignored
linux-azure-fde-5.15 Not in release Not in release Not in release Ignored Not in release
linux-azure-fde-5.19 Not in release Not in release Ignored Not in release Not in release
linux-azure-fde-6.14 Not in release Ignored Not in release Not in release Not in release
linux-azure-fde-6.17 Not in release Ignored Not in release Not in release Not in release
linux-azure-fde-6.2 Not in release Not in release Ignored Not in release Not in release
linux-azure-fde-6.8 Not in release Not in release Ignored Not in release Not in release
linux-azure-fips Not in release Ignored Ignored Ignored Ignored
linux-azure-nvidia Not in release Ignored Not in release Not in release Not in release
linux-azure-nvidia-6.14 Not in release Ignored Not in release Not in release Not in release
linux-bluefield Not in release Not in release Not in release Ignored Not in release
linux-dell300x Not in release Not in release Not in release Not in release Ignored
linux-fips Not in release Ignored Ignored Ignored Ignored
linux-gcp-4.15 Not in release Not in release Not in release Not in release Ignored
linux-gcp-5.11 Not in release Not in release Not in release Ignored Not in release
linux-gcp-5.13 Not in release Not in release Not in release Ignored Not in release
linux-gcp-5.15 Not in release Not in release Not in release Ignored Not in release
linux-gcp-5.19 Not in release Not in release Ignored Not in release Not in release
linux-gcp-5.3 Not in release Not in release Not in release Not in release Ignored
linux-gcp-5.4 Not in release Not in release Not in release Not in release Ignored
linux-gcp-5.8 Not in release Not in release Not in release Ignored Not in release
linux-gcp-6.11 Not in release Ignored Not in release Not in release Not in release
linux-gcp-6.14 Not in release Ignored Not in release Not in release Not in release
linux-gcp-6.17 Not in release Ignored Not in release Not in release Not in release
linux-gcp-6.2 Not in release Not in release Ignored Not in release Not in release
linux-gcp-6.5 Not in release Not in release Ignored Not in release Not in release
linux-gcp-6.8 Not in release Not in release Ignored Not in release Not in release
linux-gcp-fips Not in release Ignored Ignored Ignored Ignored
linux-gke-4.15 Not in release Not in release Not in release Not in release Ignored
linux-gke-5.0 Not in release Not in release Not in release Not in release Ignored
linux-gke-5.15 Not in release Not in release Not in release Ignored Not in release
linux-gke-5.3 Not in release Not in release Not in release Not in release Ignored
linux-gke-5.4 Not in release Not in release Not in release Not in release Ignored
linux-gkeop Not in release Ignored Ignored Ignored Not in release
linux-gkeop-5.15 Not in release Not in release Not in release Ignored Not in release
linux-gkeop-5.4 Not in release Not in release Not in release Not in release Ignored
linux-hwe Not in release Not in release Not in release Not in release Ignored
linux-hwe-5.11 Not in release Not in release Not in release Ignored Not in release
linux-hwe-5.13 Not in release Not in release Not in release Ignored Not in release
linux-hwe-5.15 Not in release Not in release Not in release Ignored Not in release
linux-hwe-5.19 Not in release Not in release Ignored Not in release Not in release
linux-hwe-5.4 Not in release Not in release Not in release Not in release Ignored
linux-hwe-5.8 Not in release Not in release Not in release Ignored Not in release
linux-hwe-6.11 Not in release Vulnerable Not in release Not in release Not in release
linux-hwe-6.14 Not in release Vulnerable Not in release Not in release Not in release
linux-hwe-6.17 Not in release Vulnerable Not in release Not in release Not in release
linux-hwe-6.2 Not in release Not in release Ignored Not in release Not in release
linux-hwe-6.5 Not in release Not in release Vulnerable Not in release Not in release
linux-hwe-6.8 Not in release Not in release Vulnerable Not in release Not in release
linux-hwe-edge Not in release Not in release Not in release Not in release Ignored
linux-ibm Ignored Ignored Ignored Ignored Not in release
linux-ibm-5.15 Not in release Not in release Not in release Ignored Not in release
linux-ibm-5.4 Not in release Not in release Not in release Not in release Ignored
linux-ibm-6.8 Not in release Not in release Ignored Not in release Not in release
linux-intel Not in release Vulnerable Not in release Not in release Not in release
linux-intel-5.13 Not in release Not in release Not in release Ignored Not in release
linux-intel-iot-realtime Not in release Not in release Ignored Not in release Not in release
linux-intel-iotg Not in release Not in release Ignored Not in release Not in release
linux-intel-iotg-5.15 Not in release Not in release Not in release Ignored Not in release
linux-iot Not in release Not in release Not in release Vulnerable Not in release
linux-kvm Not in release Not in release Ignored Ignored Ignored
linux-laptop Not in release Not in release Not in release Not in release Not in release
linux-lowlatency Not in release Ignored Ignored Not in release Not in release
linux-lowlatency-hwe-5.15 Not in release Not in release Not in release Ignored Not in release
linux-lowlatency-hwe-5.19 Not in release Not in release Ignored Not in release Not in release
linux-lowlatency-hwe-6.11 Not in release Ignored Not in release Not in release Not in release
linux-lowlatency-hwe-6.2 Not in release Not in release Ignored Not in release Not in release
linux-lowlatency-hwe-6.5 Not in release Not in release Ignored Not in release Not in release
linux-lowlatency-hwe-6.8 Not in release Not in release Ignored Not in release Not in release
linux-lts-xenial Not in release Not in release Not in release Not in release Not in release
linux-nvidia Needs evaluation Ignored Vulnerable Not in release Not in release
linux-nvidia-6.11 Not in release Ignored Not in release Not in release Not in release
linux-nvidia-6.17 Not in release Vulnerable Not in release Not in release Not in release
linux-nvidia-6.2 Not in release Not in release Ignored Not in release Not in release
linux-nvidia-6.5 Not in release Not in release Vulnerable Not in release Not in release
linux-nvidia-6.8 Not in release Not in release Ignored Not in release Not in release
linux-nvidia-bos-7.0 Not in release Not in release Not in release Not in release Not in release
linux-nvidia-lowlatency Not in release Ignored Not in release Not in release Not in release
linux-nvidia-tegra Not in release Ignored Ignored Not in release Not in release
linux-nvidia-tegra-5.15 Not in release Not in release Not in release Ignored Not in release
linux-nvidia-tegra-igx Not in release Not in release Ignored Not in release Not in release
linux-oem Not in release Not in release Not in release Not in release Ignored
linux-oem-5.10 Not in release Not in release Not in release Ignored Not in release
linux-oem-5.13 Not in release Not in release Not in release Ignored Not in release
linux-oem-5.14 Not in release Not in release Not in release Ignored Not in release
linux-oem-5.17 Not in release Not in release Ignored Not in release Not in release
linux-oem-5.6 Not in release Not in release Not in release Ignored Not in release
linux-oem-6.0 Not in release Not in release Ignored Not in release Not in release
linux-oem-6.1 Not in release Not in release Ignored Not in release Not in release
linux-oem-6.11 Not in release Vulnerable Not in release Not in release Not in release
linux-oem-6.14 Not in release Vulnerable Not in release Not in release Not in release
linux-oem-6.17 Not in release Vulnerable Not in release Not in release Not in release
linux-oem-6.5 Not in release Not in release Ignored Not in release Not in release
linux-oem-6.8 Not in release Vulnerable Not in release Not in release Not in release
linux-oem-osp1 Not in release Not in release Not in release Not in release Ignored
linux-oracle-5.0 Not in release Not in release Not in release Not in release Ignored
linux-oracle-5.11 Not in release Not in release Not in release Ignored Not in release
linux-oracle-5.13 Not in release Not in release Not in release Ignored Not in release
linux-oracle-5.15 Not in release Not in release Not in release Ignored Not in release
linux-oracle-5.3 Not in release Not in release Not in release Not in release Ignored
linux-oracle-5.4 Not in release Not in release Not in release Not in release Ignored
linux-oracle-5.8 Not in release Not in release Not in release Ignored Not in release
linux-oracle-6.14 Not in release Ignored Not in release Not in release Not in release
linux-oracle-6.17 Not in release Ignored Not in release Not in release Not in release
linux-oracle-6.5 Not in release Not in release Ignored Not in release Not in release
linux-oracle-6.8 Not in release Not in release Ignored Not in release Not in release
linux-raspi-5.4 Not in release Not in release Not in release Not in release Ignored
linux-raspi-realtime Not in release Ignored Not in release Not in release Not in release
linux-raspi2 Not in release Not in release Not in release Ignored Ignored
linux-raspi2-5.3 Not in release Not in release Not in release Not in release Ignored
linux-realtime-6.14 Not in release Ignored Not in release Not in release Not in release
linux-realtime-6.17 Not in release Ignored Not in release Not in release Not in release
linux-realtime-6.8 Not in release Not in release Ignored Not in release Not in release
linux-riscv-5.11 Not in release Not in release Not in release Ignored Not in release
linux-riscv-5.15 Not in release Not in release Not in release Vulnerable Not in release
linux-riscv-5.19 Not in release Not in release Ignored Not in release Not in release
linux-riscv-5.8 Not in release Not in release Not in release Ignored Not in release
linux-riscv-6.14 Not in release Ignored Not in release Not in release Not in release
linux-riscv-6.17 Not in release Ignored Not in release Not in release Not in release
linux-riscv-6.5 Not in release Not in release Ignored Not in release Not in release
linux-riscv-6.8 Not in release Not in release Ignored Not in release Not in release
linux-snapdragon Not in release Not in release Not in release Not in release Ignored
linux-starfive Not in release Not in release Not in release Not in release Not in release
linux-starfive-5.19 Not in release Not in release Ignored Not in release Not in release
linux-starfive-6.2 Not in release Not in release Ignored Not in release Not in release
linux-starfive-6.5 Not in release Not in release Ignored Not in release Not in release
linux-xilinx Not in release Vulnerable Not in release Not in release Not in release
linux-xilinx-zynqmp Not in release Not in release Ignored Vulnerable Not in release
Show all 180 packages Show less packages

CVE-2022-3637

Medium priority
Vulnerable

A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It...

1 affected package

bluez

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez Not affected Not affected Not affected Not affected Not affected
Show less packages

CVE-2022-3563

Low priority
Fixed

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len...

1 affected package

bluez

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez — Not affected Fixed Not affected Not affected
Show less packages

CVE-2022-39177

Medium priority

Some fixes available 2 of 3

BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c.

1 affected package

bluez

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez Not affected Not affected Not affected Fixed Fixed
Show less packages

CVE-2022-39176

Medium priority

Some fixes available 2 of 3

BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.

1 affected package

bluez

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez Not affected Not affected Not affected Fixed Fixed
Show less packages

CVE-2022-0204

Medium priority
Fixed

A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.

1 affected package

bluez

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez — — Fixed Fixed Fixed
Show less packages

CVE-2019-8922

Medium priority
Fixed

A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the destination buffer. The function simply appends all data passed to it. The values of...

1 affected package

bluez

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez — Not affected Not affected Not affected Fixed
Show less packages

CVE-2019-8921

Medium priority
Fixed

An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning...

1 affected package

bluez

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez — Not affected Not affected Not affected Fixed
Show less packages

CVE-2021-41229

Low priority

Some fixes available 13 of 14

BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This...

1 affected package

bluez

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez Fixed Fixed Fixed Fixed Fixed
Show less packages

CVE-2021-43400

Medium priority

Some fixes available 4 of 5

An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D-Bus processing of a WriteValue call.

1 affected package

bluez

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez Not affected Not affected Not affected Fixed Fixed
Show less packages