tocsin

Debian/bluez: medium 6.5

An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick

Action: Upgrade bluez to 5.54-1 or later.

Affected

introducedfixedlast affected
05.54-1-

Fixed versions

5.54-1

Sources

published · modified · JSON