It was discovered that BlueZ incorrectly handled bonding HID and HOGP devices. A local attacker could possibly use this issue to impersonate non-bonded devices. (CVE-2020-0556)
It was discovered that BlueZ incorrectly handled certain commands. A local attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-7837)
{ "availability": "No subscription required", "binaries": [ { "binary_version": "5.37-0ubuntu5.3", "binary_name": "bluetooth" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "bluez" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "bluez-cups" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "bluez-cups-dbgsym" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "bluez-dbg" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "bluez-dbgsym" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "bluez-hcidump" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "bluez-hcidump-dbgsym" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "bluez-obexd" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "bluez-obexd-dbgsym" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "bluez-tests" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "bluez-tests-dbgsym" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "libbluetooth-dev" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "libbluetooth-dev-dbgsym" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "libbluetooth3" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "libbluetooth3-dbg" }, { "binary_version": "5.37-0ubuntu5.3", "binary_name": "libbluetooth3-dbgsym" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "5.48-0ubuntu3.4", "binary_name": "bluetooth" }, { "binary_version": "5.48-0ubuntu3.4", "binary_name": "bluez" }, { "binary_version": "5.48-0ubuntu3.4", "binary_name": "bluez-cups" }, { "binary_version": "5.48-0ubuntu3.4", "binary_name": "bluez-dbg" }, { "binary_version": "5.48-0ubuntu3.4", "binary_name": "bluez-hcidump" }, { "binary_version": "5.48-0ubuntu3.4", "binary_name": "bluez-obexd" }, { "binary_version": "5.48-0ubuntu3.4", "binary_name": "bluez-tests" }, { "binary_version": "5.48-0ubuntu3.4", "binary_name": "libbluetooth-dev" }, { "binary_version": "5.48-0ubuntu3.4", "binary_name": "libbluetooth3" }, { "binary_version": "5.48-0ubuntu3.4", "binary_name": "libbluetooth3-dbg" } ] }