Description (CNA)
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / bluez | affected bluez versions prior to 5.63 |
CWE
CWE-119
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2039807
- https://github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q
- https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0
- https://security.gentoo.org/glsa/202209-16
- https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html
ADP enrichment
No English description supplied.
- https://bugzilla.redhat.com/show_bug.cgi?id=2039807
- https://github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q
- https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0
- https://security.gentoo.org/glsa/202209-16
- https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html
- https://lists.debian.org/debian-lts-announce/2024/09/msg00022.html
No English description supplied.
No references supplied.