Multiple vulnerabilities have been discovered in Bluez, the worst of which can lead to privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-wireless/bluez | * | < 5.70-r1 | >= 5.70-r1 |
BlueZ is the canonical bluetooth tools and system daemons package for Linux.
Multiple vulnerabilities have been discovered in BlueZ. Please review the CVE identifiers referenced below for details.
An attacker may inject unauthenticated keystrokes via Bluetooth, leading to privilege escalation or denial of service.
There is no known workaround at this time.
All BlueZ users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/bluez-5.70-r1"
Multiple vulnerabilities have been discovered in BlueZ, the worst of which could result in arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-wireless/bluez | * | < 5.63 | >= 5.63 |
BlueZ is the canonical bluetooth tools and system daemons package for Linux.
Multiple vulnerabilities have been discovered in BlueZ. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All BlueZ users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/bluez-5.63"
A vulnerability in BlueZ might allow remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-wireless/bluez | * | < 5.55 | >= 5.55 |
Set of tools to manage Bluetooth devices for Linux.
It was discovered that there was a double-free vulnerability in Bluez after the service discovery which occurs after a Bluetoth Low Energy (BLE) connection has been established to a device.
A remote attacker, by enticing a user to connect to a malicious GATT server or device, could cause the execution of arbitrary code with the privileges of the user running gatttool client or cause a Denial of Service condition.
There is no known workaround at this time.
All BlueZ users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/bluez-5.55"
A vulnerability in BlueZ might allow remote attackers to bypass security restrictions.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-wireless/bluez | * | < 5.54 | >= 5.54 |
Set of tools to manage Bluetooth devices for Linux.
It was discovered that the HID and HOGP profiles implementations in BlueZ did not specifically require bonding between the device and the host.
A remote attacker with adjacent access could impersonate an existing HID device, cause a Denial of Service condition or escalate privileges.
There is no known workaround at this time.
All BlueZ users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/bluez-5.54"