Search CVE reports


Toggle filters

21 – 30 of 52 results


CVE-2021-3588

Medium priority
Fixed

The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading.

1 affected package

bluez

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez Not affected Fixed Not affected
Show less packages

CVE-2021-34148

Medium priority
Vulnerable

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with a greater ACL Length after completion of the LMP setup procedure,...

1 affected package

bluez-firmware

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez-firmware Not affected Vulnerable Not in release Not in release
Show less packages

CVE-2021-34147

Medium priority
Vulnerable

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple reconnections to the...

1 affected package

bluez-firmware

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez-firmware Not affected Vulnerable Not in release Not in release
Show less packages

CVE-2021-34146

Medium priority
Vulnerable

The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and restart...

1 affected package

bluez-firmware

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez-firmware Not affected Vulnerable Not in release Not in release
Show less packages

CVE-2021-34145

Medium priority
Vulnerable

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with an invalid Baseband packet type (and LT_ADDRESS and LT_ADDR) after...

1 affected package

bluez-firmware

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez-firmware Not affected Vulnerable Not in release Not in release
Show less packages

CVE-2021-0129

Medium priority

Some fixes available 72 of 81

Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.

152 affected packages

linux-hwe, linux-hwe-5.4, linux-hwe-5.8, linux-hwe-edge, linux-lts-xenial...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-hwe Not in release Not in release Not in release Ignored
linux-hwe-5.4 Not in release Not in release Not in release Fixed
linux-hwe-5.8 Not in release Not in release Ignored Not in release
linux-hwe-edge Not in release Not in release Not in release Ignored
linux-lts-xenial Not in release Not in release Not in release Not in release
linux-aws Not affected Not affected Fixed Fixed
linux-aws-5.0 Not in release Not in release Not in release Ignored
linux-aws-5.3 Not in release Not in release Not in release Ignored
linux-aws-5.4 Not in release Not in release Not in release Fixed
linux-aws-hwe Not in release Not in release Not in release Not in release
linux-azure Not affected Not affected Fixed Ignored
linux-azure-4.15 Not in release Not in release Not in release Fixed
linux-azure-5.3 Not in release Not in release Not in release Ignored
linux-azure-5.4 Not in release Not in release Not in release Fixed
linux-dell300x Not in release Not in release Not in release Fixed
linux-azure-edge Not in release Not in release Not in release Ignored
linux-gcp Not affected Not affected Fixed Ignored
linux-gcp-4.15 Not in release Not in release Not in release Fixed
linux-gcp-5.3 Not in release Not in release Not in release Ignored
linux-gcp-5.4 Not in release Not in release Not in release Fixed
linux-gcp-edge Not in release Not in release Not in release Ignored
linux-gke Not affected Not affected Fixed Not in release
linux-gke-4.15 Not in release Not in release Not in release Ignored
linux-gke-5.0 Not in release Not in release Not in release Ignored
linux-gke-5.3 Not in release Not in release Not in release Ignored
linux-gke-5.4 Not in release Not in release Not in release Fixed
linux-gkeop Not affected Not affected Fixed Not in release
linux-gkeop-5.4 Not in release Not in release Not in release Fixed
linux-oracle-5.0 Not in release Not in release Not in release Ignored
linux-oracle-5.3 Not in release Not in release Not in release Ignored
linux-oem Not in release Not in release Not in release Ignored
linux-oracle-5.4 Not in release Not in release Not in release Fixed
linux-oem-5.10 Not in release Not in release Fixed Not in release
linux-oem-5.6 Not in release Not in release Ignored Not in release
linux-oem-osp1 Not in release Not in release Not in release Ignored
linux-raspi Not affected Not affected Fixed Not in release
linux-raspi2 Not in release Not in release Ignored Fixed
linux-raspi2-5.3 Not in release Not in release Not in release Ignored
linux-raspi-5.4 Not in release Not in release Not in release Fixed
linux-riscv Not affected Not affected Ignored Not in release
linux-snapdragon Not in release Not in release Not in release Fixed
linux-aws-5.8 Not in release Not in release Fixed Not in release
linux-azure-5.8 Not in release Not in release Fixed Not in release
linux-gcp-5.8 Not in release Not in release Fixed Not in release
linux-oracle-5.8 Not in release Not in release Fixed Not in release
linux-riscv-5.8 Not in release Not in release Ignored Not in release
linux Not affected Not affected Fixed Fixed
bluez Not affected Not affected Fixed Fixed
linux-hwe-5.11 Not in release Not in release Fixed Not in release
linux-riscv-5.11 Not in release Not in release Fixed Not in release
linux-aws-5.11 Not in release Not in release Fixed Not in release
linux-azure-5.11 Not in release Not in release Fixed Not in release
linux-oem-5.13 Not in release Not in release Not affected Not in release
linux-oracle-5.11 Not in release Not in release Fixed Not in release
linux-bluefield Not in release Not in release Fixed Not in release
linux-kvm Not in release Not affected Fixed Fixed
linux-nvidia Not affected Not affected Not in release Not in release
linux-oracle Not affected Not affected Fixed Fixed
linux-gcp-5.11 Not in release Not in release Fixed Not in release
linux-oem-5.14 Not in release Not in release Not affected Not in release
linux-intel-5.13 Not in release Not in release Not affected Not in release
linux-azure-5.13 Not in release Not in release Not affected Not in release
linux-gkeop-5.15 Not in release Not in release Not affected Not in release
linux-aws-5.19 Not in release Not affected Not in release Not in release
linux-gcp-5.19 Not in release Not affected Not in release Not in release
linux-riscv-5.19 Not in release Not affected Not in release Not in release
linux-aws-5.13 Not in release Not in release Not affected Not in release
linux-hwe-5.13 Not in release Not in release Not affected Not in release
linux-allwinner Not in release Not in release Not in release Not in release
linux-allwinner-5.19 Not in release Not affected Not in release Not in release
linux-ibm Not affected Not affected Not affected Not in release
linux-starfive Not in release Not in release Not in release Not in release
linux-starfive-5.19 Not in release Not affected Not in release Not in release
linux-fips Not in release Not affected Fixed Fixed
linux-azure-fde Not in release Not affected Fixed Not in release
linux-gcp-5.13 Not in release Not in release Not affected Not in release
linux-ibm-5.4 Not in release Not in release Not in release Not affected
linux-oracle-5.13 Not in release Not in release Not affected Not in release
linux-oem-6.0 Not in release Not affected Not in release Not in release
linux-aws-6.2 Not in release Not affected Not in release Not in release
linux-hwe-6.2 Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.2 Not in release Not affected Not in release Not in release
linux-ibm-5.15 Not in release Not in release Not affected Not in release
linux-gcp-6.2 Not in release Not affected Not in release Not in release
linux-azure-6.2 Not in release Not affected Not in release Not in release
linux-azure-fde-6.2 Not in release Not affected Not in release Not in release
linux-lowlatency Not affected Not affected Not in release Not in release
linux-oem-5.17 Not in release Not affected Not in release Not in release
linux-intel-iotg Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-5.15 Not in release Not in release Not affected Not in release
linux-hwe-5.15 Not in release Not in release Not affected Not in release
linux-aws-5.15 Not in release Not in release Not affected Not in release
linux-azure-5.15 Not in release Not in release Not affected Not in release
linux-gcp-5.15 Not in release Not in release Not affected Not in release
linux-gke-5.15 Not in release Not in release Not affected Not in release
linux-oracle-5.15 Not in release Not in release Not affected Not in release
linux-azure-fde-5.15 Not in release Not in release Not affected Not in release
linux-oem-6.1 Not in release Not affected Not in release Not in release
linux-hwe-5.19 Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-5.19 Not in release Not affected Not in release Not in release
linux-azure-5.19 Not in release Not affected Not in release Not in release
linux-iot Not in release Not in release Not affected Not in release
linux-azure-fde-5.19 Not in release Not affected Not in release Not in release
linux-xilinx-zynqmp Not in release Not affected Not affected Not in release
linux-riscv-5.15 Not in release Not in release Not affected Not in release
linux-nvidia-6.2 Not in release Not affected Not in release Not in release
linux-starfive-6.2 Not in release Not affected Not in release Not in release
linux-laptop Not in release Not in release Not in release Not in release
linux-oem-6.5 Not in release Not affected Not in release Not in release
linux-hwe-6.5 Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.5 Not in release Not affected Not in release Not in release
linux-riscv-6.5 Not in release Not affected Not in release Not in release
linux-starfive-6.5 Not in release Not affected Not in release Not in release
linux-aws-6.5 Not in release Not affected Not in release Not in release
linux-azure-6.5 Not in release Not affected Not in release Not in release
linux-gcp-6.5 Not in release Not affected Not in release Not in release
linux-oracle-6.5 Not in release Not affected Not in release Not in release
linux-nvidia-6.5 Not in release Not affected Not in release Not in release
linux-aws-fips Not in release Not affected Fixed Fixed
linux-azure-fips Not in release Not affected Fixed Fixed
linux-gcp-fips Not in release Not affected Fixed Fixed
linux-oem-6.8 Not affected Not in release Not in release Not in release
linux-intel Not affected Not in release Not in release Not in release
linux-nvidia-6.8 Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency Not affected Not in release Not in release Not in release
linux-hwe-6.8 Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.8 Not in release Not affected Not in release Not in release
linux-riscv-6.8 Not in release Not affected Not in release Not in release
linux-intel-iot-realtime Not in release Not affected Not in release Not in release
linux-raspi-realtime Not affected Not in release Not in release Not in release
linux-realtime Not affected Not affected Not in release Not in release
linux-aws-6.8 Not in release Not affected Not in release Not in release
linux-gcp-6.8 Not in release Not affected Not in release Not in release
linux-oracle-6.8 Not in release Not affected Not in release Not in release
linux-azure-6.8 Not in release Not affected Not in release Not in release
linux-oem-6.11 Not affected Not in release Not in release Not in release
linux-hwe-6.11 Not affected Not in release Not in release Not in release
linux-lowlatency-hwe-6.11 Not affected Not in release Not in release Not in release
linux-nvidia-tegra Not affected Not affected Not in release Not in release
linux-nvidia-tegra-igx Not in release Not affected Not in release Not in release
linux-azure-nvidia Not affected Not in release Not in release Not in release
linux-azure-6.11 Not affected Not in release Not in release Not in release
linux-gcp-6.11 Not affected Not in release Not in release Not in release
linux-nvidia-tegra-5.15 Not in release Not in release Not affected Not in release
linux-oem-6.14 Not affected Not in release Not in release Not in release
linux-riscv-6.14 Not affected Not in release Not in release Not in release
linux-ibm-6.8 Not in release Not affected Not in release Not in release
linux-aws-6.14 Not affected Not in release Not in release Not in release
linux-gcp-6.14 Not affected Not in release Not in release Not in release
linux-hwe-6.14 Not affected Not in release Not in release Not in release
linux-oracle-6.14 Not affected Not in release Not in release Not in release
Show all 152 packages Show less packages

CVE-2020-9770

Low priority
Vulnerable

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4. An attacker in a privileged network position may be able to intercept Bluetooth traffic.

1 affected package

bluez

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2020-27153

Low priority
Fixed

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant...

1 affected package

bluez

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez Fixed Fixed Fixed
Show less packages

CVE-2020-26558

Medium priority

Some fixes available 72 of 81

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure)...

152 affected packages

linux, linux-azure-4.15, linux-azure-5.3, linux-azure-5.4, linux-azure-edge...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux Not affected Not affected Fixed Fixed
linux-azure-4.15 Not in release Not in release Not in release Fixed
linux-azure-5.3 Not in release Not in release Not in release Ignored
linux-azure-5.4 Not in release Not in release Not in release Fixed
linux-azure-edge Not in release Not in release Not in release Ignored
linux-dell300x Not in release Not in release Not in release Fixed
linux-gcp Not affected Not affected Fixed Ignored
linux-gcp-4.15 Not in release Not in release Not in release Fixed
linux-gcp-5.3 Not in release Not in release Not in release Ignored
linux-gcp-5.4 Not in release Not in release Not in release Fixed
linux-gcp-edge Not in release Not in release Not in release Ignored
linux-gke Not affected Not affected Fixed Not in release
linux-gke-4.15 Not in release Not in release Not in release Ignored
linux-gke-5.0 Not in release Not in release Not in release Ignored
linux-gke-5.3 Not in release Not in release Not in release Ignored
linux-gke-5.4 Not in release Not in release Not in release Fixed
linux-gkeop Not affected Not affected Fixed Not in release
linux-gkeop-5.4 Not in release Not in release Not in release Fixed
linux-oem Not in release Not in release Not in release Ignored
linux-snapdragon Not in release Not in release Not in release Fixed
linux-riscv Not affected Not affected Ignored Not in release
linux-aws-5.8 Not in release Not in release Fixed Not in release
linux-azure-5.8 Not in release Not in release Fixed Not in release
linux-gcp-5.8 Not in release Not in release Fixed Not in release
linux-oracle-5.8 Not in release Not in release Fixed Not in release
linux-riscv-5.8 Not in release Not in release Ignored Not in release
linux-aws Not affected Not affected Fixed Fixed
linux-azure Not affected Not affected Fixed Ignored
linux-aws-5.4 Not in release Not in release Not in release Fixed
linux-raspi2 Not in release Not in release Ignored Fixed
linux-raspi2-5.3 Not in release Not in release Not in release Ignored
linux-hwe-5.11 Not in release Not in release Fixed Not in release
linux-oracle Not affected Not affected Fixed Fixed
linux-hwe-5.4 Not in release Not in release Not in release Fixed
linux-kvm Not in release Not affected Fixed Fixed
linux-bluefield Not in release Not in release Fixed Not in release
linux-nvidia Not affected Not affected Not in release Not in release
linux-riscv-5.11 Not in release Not in release Fixed Not in release
linux-aws-5.11 Not in release Not in release Fixed Not in release
linux-intel-5.13 Not in release Not in release Not affected Not in release
linux-lts-xenial Not in release Not in release Not in release Not in release
linux-gcp-5.11 Not in release Not in release Fixed Not in release
linux-azure-5.13 Not in release Not in release Not affected Not in release
linux-gkeop-5.15 Not in release Not in release Not affected Not in release
linux-aws-5.19 Not in release Not affected Not in release Not in release
linux-gcp-5.19 Not in release Not affected Not in release Not in release
linux-riscv-5.19 Not in release Not affected Not in release Not in release
linux-azure-5.11 Not in release Not in release Fixed Not in release
linux-allwinner Not in release Not in release Not in release Not in release
linux-allwinner-5.19 Not in release Not affected Not in release Not in release
linux-ibm Not affected Not affected Not affected Not in release
linux-starfive Not in release Not in release Not in release Not in release
linux-starfive-5.19 Not in release Not affected Not in release Not in release
linux-fips Not in release Not affected Fixed Fixed
linux-azure-fde Not in release Not affected Fixed Not in release
linux-gcp-5.13 Not in release Not in release Not affected Not in release
linux-ibm-5.4 Not in release Not in release Not in release Not affected
linux-oracle-5.13 Not in release Not in release Not affected Not in release
linux-oem-6.0 Not in release Not affected Not in release Not in release
linux-aws-6.2 Not in release Not affected Not in release Not in release
linux-hwe-6.2 Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.2 Not in release Not affected Not in release Not in release
linux-ibm-5.15 Not in release Not in release Not affected Not in release
linux-gcp-6.2 Not in release Not affected Not in release Not in release
linux-azure-6.2 Not in release Not affected Not in release Not in release
linux-azure-fde-6.2 Not in release Not affected Not in release Not in release
linux-oem-5.17 Not in release Not affected Not in release Not in release
linux-lowlatency Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 Not in release Not in release Not affected Not in release
linux-hwe-5.15 Not in release Not in release Not affected Not in release
linux-aws-5.15 Not in release Not in release Not affected Not in release
linux-intel-iotg Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 Not in release Not in release Not affected Not in release
linux-iot Not in release Not in release Not affected Not in release
linux-xilinx-zynqmp Not in release Not affected Not affected Not in release
bluez Not affected Not affected Fixed Fixed
linux-aws-5.0 Not in release Not in release Not in release Ignored
linux-aws-5.13 Not in release Not in release Not affected Not in release
linux-aws-5.3 Not in release Not in release Not in release Ignored
linux-aws-hwe Not in release Not in release Not in release Not in release
linux-azure-5.15 Not in release Not in release Not affected Not in release
linux-azure-5.19 Not in release Not affected Not in release Not in release
linux-azure-fde-5.15 Not in release Not in release Not affected Not in release
linux-azure-fde-5.19 Not in release Not affected Not in release Not in release
linux-gcp-5.15 Not in release Not in release Not affected Not in release
linux-gke-5.15 Not in release Not in release Not affected Not in release
linux-hwe Not in release Not in release Not in release Ignored
linux-hwe-5.13 Not in release Not in release Not affected Not in release
linux-hwe-5.19 Not in release Not affected Not in release Not in release
linux-hwe-5.8 Not in release Not in release Ignored Not in release
linux-hwe-edge Not in release Not in release Not in release Ignored
linux-lowlatency-hwe-5.19 Not in release Not affected Not in release Not in release
linux-oem-5.10 Not in release Not in release Fixed Not in release
linux-oem-5.13 Not in release Not in release Not affected Not in release
linux-oem-5.14 Not in release Not in release Not affected Not in release
linux-oem-5.6 Not in release Not in release Ignored Not in release
linux-oem-6.1 Not in release Not affected Not in release Not in release
linux-oem-osp1 Not in release Not in release Not in release Ignored
linux-oracle-5.0 Not in release Not in release Not in release Ignored
linux-oracle-5.11 Not in release Not in release Fixed Not in release
linux-oracle-5.15 Not in release Not in release Not affected Not in release
linux-oracle-5.3 Not in release Not in release Not in release Ignored
linux-oracle-5.4 Not in release Not in release Not in release Fixed
linux-raspi Not affected Not affected Fixed Not in release
linux-raspi-5.4 Not in release Not in release Not in release Fixed
linux-riscv-5.15 Not in release Not in release Not affected Not in release
linux-nvidia-6.2 Not in release Not affected Not in release Not in release
linux-starfive-6.2 Not in release Not affected Not in release Not in release
linux-laptop Not in release Not in release Not in release Not in release
linux-oem-6.5 Not in release Not affected Not in release Not in release
linux-hwe-6.5 Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.5 Not in release Not affected Not in release Not in release
linux-riscv-6.5 Not in release Not affected Not in release Not in release
linux-starfive-6.5 Not in release Not affected Not in release Not in release
linux-aws-6.5 Not in release Not affected Not in release Not in release
linux-azure-6.5 Not in release Not affected Not in release Not in release
linux-gcp-6.5 Not in release Not affected Not in release Not in release
linux-oracle-6.5 Not in release Not affected Not in release Not in release
linux-nvidia-6.5 Not in release Not affected Not in release Not in release
linux-aws-fips Not in release Not affected Fixed Fixed
linux-azure-fips Not in release Not affected Fixed Fixed
linux-gcp-fips Not in release Not affected Fixed Fixed
linux-oem-6.8 Not affected Not in release Not in release Not in release
linux-intel Not affected Not in release Not in release Not in release
linux-nvidia-6.8 Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency Not affected Not in release Not in release Not in release
linux-hwe-6.8 Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.8 Not in release Not affected Not in release Not in release
linux-riscv-6.8 Not in release Not affected Not in release Not in release
linux-intel-iot-realtime Not in release Not affected Not in release Not in release
linux-raspi-realtime Not affected Not in release Not in release Not in release
linux-realtime Not affected Not affected Not in release Not in release
linux-aws-6.8 Not in release Not affected Not in release Not in release
linux-gcp-6.8 Not in release Not affected Not in release Not in release
linux-oracle-6.8 Not in release Not affected Not in release Not in release
linux-azure-6.8 Not in release Not affected Not in release Not in release
linux-oem-6.11 Not affected Not in release Not in release Not in release
linux-hwe-6.11 Not affected Not in release Not in release Not in release
linux-lowlatency-hwe-6.11 Not affected Not in release Not in release Not in release
linux-nvidia-tegra Not affected Not affected Not in release Not in release
linux-nvidia-tegra-igx Not in release Not affected Not in release Not in release
linux-azure-nvidia Not affected Not in release Not in release Not in release
linux-azure-6.11 Not affected Not in release Not in release Not in release
linux-gcp-6.11 Not affected Not in release Not in release Not in release
linux-nvidia-tegra-5.15 Not in release Not in release Not affected Not in release
linux-oem-6.14 Not affected Not in release Not in release Not in release
linux-riscv-6.14 Not affected Not in release Not in release Not in release
linux-ibm-6.8 Not in release Not affected Not in release Not in release
linux-aws-6.14 Not affected Not in release Not in release Not in release
linux-gcp-6.14 Not affected Not in release Not in release Not in release
linux-hwe-6.14 Not affected Not in release Not in release Not in release
linux-oracle-6.14 Not affected Not in release Not in release Not in release
Show all 152 packages Show less packages

CVE-2020-10370

Medium priority
Vulnerable

Certain Cypress (and Broadcom) Wireless Combo chips such as CYW43455, when a 2021-01-26 Bluetooth firmware update is not present, allow a Bluetooth outage via a "Spectra" attack.

2 affected packages

bluez-firmware, linux-firmware-raspi2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
bluez-firmware Not affected Not affected
linux-firmware-raspi2 Not in release Not in release Not in release Vulnerable
Show less packages