The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5155-1 advisory.

    It was discovered that BlueZ incorrectly handled the Discoverable status when a device is powered down.
    This could result in devices being powered up discoverable, contrary to expectations. This issue only     affected Ubuntu 20.04 LTS, Ubuntu 21.04, and Ubuntu 21.10. (CVE-2021-3658)

    It was discovered that BlueZ incorrectly handled certain memory operations. A remote attacker could     possibly use this issue to cause BlueZ to consume resources, leading to a denial of service.
    (CVE-2021-41229)

    It was discovered that the BlueZ gatt server incorrectly handled disconnects. A remote attacker could     possibly use this issue to cause BlueZ to crash, leading to a denial of service. (CVE-2021-43400)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 18.04 LTS / 20.04 LTS : BlueZ vulnerabilities (USN-5155-1)

critical Nessus Plugin ID 155687

Version 1.6