Bluez Project vulnerabilities
5 vulnerabilities
Known vulnerabilities in Bluez Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2RoutineCVE-2016-7837bluez_project · bluez +4 morebluez_project bluezBuffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.CVSS7.8HighEPSS0.56%PrioritiseCVE-2016-9918bluez_project · bluez +6 morebluez_project bluezIn BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.CVSS7.5HighEPSS3.82%PrioritiseCVE-2006-6899bluez_project · bluez +3 morebluez_project bluezhidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack.CVSS5.4MediumEPSS3.41%RoutineCVE-2006-0670bluez_project · hcidump +1 morebluez_project hcidumpBuffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.CVSS5.0MediumEPSS3.54%RoutineCVE-2005-2547bluez_project · bluez +1 morebluez_project bluezsecurity.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper.CVSS7.5HighEPSS2.40%