BlueZ
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-0204 | bluez versions prior to 5.63 | A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially craft | HIGH 8.8 | 1.8 % | ||
| CVE-2021-3658 | Fixedin - 5.61 and above. | bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a d | MEDIUM 6.5 | 0.8 % | ||
| CVE-2021-0129 | See references | Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access. | MEDIUM 5.7 | 0.8 % | ||
| CVE-2020-12352 | See references | Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access. | MEDIUM 6.5 | 5.7 % | ||
| CVE-2020-12351 | See references | Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. | HIGH 8.8 | 7.7 % |