Unrated
BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.
CVE-2022-39176
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-39176 bluez Fixed in: 5.55-3.1+deb11u2
- Ubuntu UBUNTU-CVE-2022-39176 bluez
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- advisory ubuntu.com
- web bugs.launchpad.net
- web lists.debian.org
- web lists.debian.org