Your submission was sent successfully! Close

Thank you for contacting us. A member of our team will be in touch shortly. Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

Search CVE reports


Toggle filters

1 – 10 of 52 results


CVE-2020-10370

Medium priority
Vulnerable

Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bluetooth outage via a "Spectra" attack.

2 affected packages

bluez-firmware, linux-firmware-raspi2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
bluez-firmware Not affected Not affected Ignored
linux-firmware-raspi2 Not in release Not in release Vulnerable Vulnerable Ignored
Show less packages

CVE-2021-37577

Medium priority
Vulnerable

Bluetooth LE and BR/EDR Secure Connections pairing and Secure Simple Pairing using the Passkey entry protocol in Bluetooth Core Specifications 2.1 through 5.3 may permit an unauthenticated man-in-the-middle attacker to identify...

1 affected packages

bluez

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
bluez Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2023-51596

Medium priority
Vulnerable

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is...

1 affected packages

bluez

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
bluez Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2023-51594

Medium priority
Vulnerable

BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of BlueZ. User interaction is required to...

1 affected packages

bluez

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
bluez Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2023-51592

Medium priority
Vulnerable

BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations...

1 affected packages

bluez

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
bluez Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2023-51589

Medium priority
Vulnerable

BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations...

1 affected packages

bluez

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
bluez Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2023-51580

Medium priority
Vulnerable

BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected...

1 affected packages

bluez

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
bluez Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2023-50230

Medium priority
Needs evaluation

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is...

1 affected packages

bluez

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
bluez Not affected Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-50229

Medium priority
Needs evaluation

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is...

1 affected packages

bluez

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
bluez Not affected Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-44431

Medium priority
Vulnerable

BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User...

1 affected packages

bluez

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
bluez Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages