CVEvulnerability
CVE-2022-0204
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-03-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:A/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119, CWE-190
Description
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
Affected configurations
• bluez bluez (< 5.63)
• fedoraproject fedora 35
• debian debian linux 10.0
Related
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2039807 Issue Tracking, Patch, Third Party Advisory
- https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0 Patch, Third Party Advisory
- https://github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q Exploit, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/202209-16 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2039807 Issue Tracking, Patch, Third Party Advisory
- https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0 Patch, Third Party Advisory
- https://github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q Exploit, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00022.html lists.debian.org
- https://security.gentoo.org/glsa/202209-16 Third Party Advisory