Search vulnerabilities

Results 4

Export CSV
CVE-2006-6899

security flaw

hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack.

CVSS 2.0 · 5.4 Medium EPSS 3.4% KEV · Not listed
CVE-2005-2547

security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper.

CVSS 2.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Products
CVE-2006-0670

bluez-hcidump Denial of Service

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.

CVSS 2.0 · 5.0 Medium EPSS 3.5% KEV · Not listed
Vendors
Products
CVE-2016-9918

bluez: Out of bounds stack read in packet_hexdump()

In BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.

CVSS 3.0 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Products