First published: Wed Jun 05 2024(Updated: )
It was discovered that BlueZ could be made to dereference invalid memory. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-3563) It was discovered that BlueZ could be made to write out of bounds. If a user were tricked into connecting to a malicious device, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2023-27349)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/bluez | <5.64-0ubuntu1.3 | 5.64-0ubuntu1.3 |
Ubuntu Linux | =22.04 | |
All of | ||
ubuntu/bluez-tests | <5.64-0ubuntu1.3 | 5.64-0ubuntu1.3 |
Ubuntu Linux | =22.04 | |
All of | ||
ubuntu/libbluetooth3 | <5.64-0ubuntu1.3 | 5.64-0ubuntu1.3 |
Ubuntu Linux | =22.04 | |
All of | ||
ubuntu/bluez | <5.53-0ubuntu3.8 | 5.53-0ubuntu3.8 |
Ubuntu Linux | =20.04 | |
All of | ||
ubuntu/libbluetooth3 | <5.53-0ubuntu3.8 | 5.53-0ubuntu3.8 |
Ubuntu Linux | =20.04 | |
All of | ||
ubuntu/bluez | <5.48-0ubuntu3.9+esm2 | 5.48-0ubuntu3.9+esm2 |
Ubuntu Linux | =18.04 | |
All of | ||
ubuntu/libbluetooth3 | <5.48-0ubuntu3.9+esm2 | 5.48-0ubuntu3.9+esm2 |
Ubuntu Linux | =18.04 | |
All of | ||
ubuntu/bluez | <5.37-0ubuntu5.3+esm4 | 5.37-0ubuntu5.3+esm4 |
Ubuntu Linux | =16.04 | |
All of | ||
ubuntu/libbluetooth3 | <5.37-0ubuntu5.3+esm4 | 5.37-0ubuntu5.3+esm4 |
Ubuntu Linux | =16.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of USN-6809-1 is classified as a potential denial of service vulnerability affecting BlueZ on Ubuntu 22.04 LTS.
To fix USN-6809-1, update the BlueZ package to version 5.64-0ubuntu1.3 or later on affected Ubuntu systems.
USN-6809-1 specifically affects Ubuntu 22.04 LTS and earlier versions with the mentioned vulnerable packages.
The affected packages in USN-6809-1 include bluez, bluez-tests, and libbluetooth3.
Yes, an attacker may exploit the USN-6809-1 vulnerability remotely to cause a denial of service.