RHSA-2024:9413MediumCVSS 7.1

Red Hat Security Advisory: bluez security update

Published
November 12, 2024
Last Modified
July 1, 2026

🔗 CVE IDs covered (10)

📋 Description

CVE-2023-27349 — BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability CVE-2023-44431 — bluez: AVRCP stack-based buffer overflow remote code execution vulnerability CVE-2023-45866 — bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-50229 — bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability CVE-2023-50230 — bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability CVE-2023-51580 — bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability CVE-2023-51589 — bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability CVE-2023-51592 — bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability CVE-2023-51594 — bluez: OBEX library out-of-bounds read information disclosure vulnerability CVE-2023-51596 — bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability

🔗 References (14)