Red Hat Security Advisory: bluez security update
🔗 CVE IDs covered (10)
📋 Description
CVE-2023-27349 — BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability CVE-2023-44431 — bluez: AVRCP stack-based buffer overflow remote code execution vulnerability CVE-2023-45866 — bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-50229 — bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability CVE-2023-50230 — bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability CVE-2023-51580 — bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability CVE-2023-51589 — bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability CVE-2023-51592 — bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability CVE-2023-51594 — bluez: OBEX library out-of-bounds read information disclosure vulnerability CVE-2023-51596 — bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability
🔗 References (14)
- selfhttps://access.redhat.com/errata/RHSA-2024:9413
- externalhttps://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2253391
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278787
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278945
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278955
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278962
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278965
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278967
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278969
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278972
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2278974
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9413.json