An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D-Bus processing of a WriteValue call.
{ "binaries": [ { "binary_version": "5.37-0ubuntu5.3+esm5", "binary_name": "bluetooth" }, { "binary_version": "5.37-0ubuntu5.3+esm5", "binary_name": "bluez" }, { "binary_version": "5.37-0ubuntu5.3+esm5", "binary_name": "bluez-cups" }, { "binary_version": "5.37-0ubuntu5.3+esm5", "binary_name": "bluez-hcidump" }, { "binary_version": "5.37-0ubuntu5.3+esm5", "binary_name": "bluez-obexd" }, { "binary_version": "5.37-0ubuntu5.3+esm5", "binary_name": "bluez-tests" }, { "binary_version": "5.37-0ubuntu5.3+esm5", "binary_name": "libbluetooth-dev" }, { "binary_version": "5.37-0ubuntu5.3+esm5", "binary_name": "libbluetooth3" } ] }
{ "binaries": [ { "binary_version": "5.48-0ubuntu3.6", "binary_name": "bluetooth" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "bluez" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "bluez-cups" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "bluez-hcidump" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "bluez-obexd" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "bluez-tests" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "libbluetooth-dev" }, { "binary_version": "5.48-0ubuntu3.6", "binary_name": "libbluetooth3" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_version": "5.53-0ubuntu3.4", "binary_name": "bluetooth" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "bluez" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "bluez-cups" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "bluez-hcidump" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "bluez-obexd" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "bluez-tests" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "libbluetooth-dev" }, { "binary_version": "5.53-0ubuntu3.4", "binary_name": "libbluetooth3" } ], "availability": "No subscription required" }