CVE-2022-0204

Description

A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.

References

https://security.gentoo.org/glsa/202209-16

https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html

https://github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q

https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0

https://bugzilla.redhat.com/show_bug.cgi?id=2039807

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3