Every CVE Search/ Get API key

CVE-2022-3563

Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference

3.5 LowFix available

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.40%Down 0.5 points since Oct 18, 2022
90%50%10%1%

What each source reports

CVE List Score used 3.5

Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

Record
CVE-2022-3563
CVSS 3.1
3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-404
Updated
2026-11-02
EUVDEUVD-2022-42927 3.5

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

Record
EUVD-2022-42927
CVSS 3.1
3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-h7mh-ffww-7v4w 5.7

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the...

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

Record
GHSA-h7mh-ffww-7v4w
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-404, CWE-476
Updated
2026-11-02
NVD 3.5

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

Record
CVE-2022-3563
CVSS 3.1
3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-404
Updated
2026-11-02
OSVAZL-29945 5.7

CVE-2022-3563 affecting package bluez for versions less than 5.63-4

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

Record
AZL-29945
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-34569 5.7

CVE-2022-3563 affecting package bluez for versions less than 5.63-4

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

Record
AZL-34569
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
Show 6 moreShow less
OSVBELL-CVE-2022-3563 5.7

CVE-2022-3563 does not affect BellSoft software

Record
BELL-CVE-2022-3563
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 3.5

Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

Record
CVE-2022-3563
CVSS 3.1
3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-404
Updated
2026-11-02
OSVDEBIAN-CVE-2022-3563 5.7

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

Record
DEBIAN-CVE-2022-3563
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVUBUNTU-CVE-2022-3563 5.7

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.

Record
UBUNTU-CVE-2022-3563
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
3.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVSUSE-SU-2023:0167-1 No score

Security update for bluez

This update for bluez fixes the following issues:

  • CVE-2022-3563: Fixed a potential crash in the mgmt-tester tool (bsc#1204426).
Record
SUSE-SU-2023:0167-1
Updated
2026-11-02
OSVUSN-6809-1 No score

bluez vulnerabilities

It was discovered that BlueZ could be made to dereference invalid memory. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-3563)

It was discovered that BlueZ could be made to write out of bounds. If a user were tricked into connecting to a malicious device, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2023-27349)

Record
USN-6809-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bluez
Azure Linux:2
 before 5.63-4
5.63-4
bluez
Azure Linux:3
 before 5.63-4
5.63-4
bluez
Debian:12
 before 5.65-1
5.65-1
bluez
Debian:13
 before 5.65-1
5.65-1
bluez
Debian:14
 before 5.65-1
5.65-1
bluez
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 5.62-150400.4.8.1
5.62-150400.4.8.1
bluez
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
 before 5.62-150400.4.8.1
5.62-150400.4.8.1
bluez
SUSE:Linux Enterprise Workstation Extension 15 SP4
 before 5.62-150400.4.8.1
5.62-150400.4.8.1
bluez
openSUSE:Leap 15.4
 before 5.62-150400.4.8.1
5.62-150400.4.8.1
bluez
Ubuntu:Pro:16.04:LTS
 before 5.37-0ubuntu5.3+esm4, plus listed versions
5.35-0ubuntu25.36-0ubuntu15.37-0ubuntu55.37-0ubuntu5.15.37-0ubuntu5.35.37-0ubuntu5.3+esm15.37-0ubuntu5.3+esm25.37-0ubuntu5.3+esm3
5.37-0ubuntu5.3+esm4
Show 5 moreShow less
Affected packages
PackageAffectedFixed
bluez
Ubuntu:22.04:LTS
 before 5.64-0ubuntu1.3, plus listed versions
5.60-0ubuntu25.62-0ubuntu15.62-0ubuntu25.63-0ubuntu15.63-0ubuntu25.64-0ubuntu15.64-0ubuntu1.1
5.64-0ubuntu1.3
bluez
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 5.37-0ubuntu5.3+esm4, plus listed versions
5.35-0ubuntu25.36-0ubuntu15.37-0ubuntu55.37-0ubuntu5.15.37-0ubuntu5.35.37-0ubuntu5.3+esm15.37-0ubuntu5.3+esm25.37-0ubuntu5.3+esm3
5.37-0ubuntu5.3+esm4
bluez
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 5.48-0ubuntu3.9+esm2, plus listed versions
5.46-0ubuntu35.46-0ubuntu45.48-0ubuntu35.48-0ubuntu3.15.48-0ubuntu3.2
Show 8 moreShow less
5.48-0ubuntu3.35.48-0ubuntu3.45.48-0ubuntu3.55.48-0ubuntu3.65.48-0ubuntu3.75.48-0ubuntu3.85.48-0ubuntu3.95.48-0ubuntu3.9+esm1
5.48-0ubuntu3.9+esm2
bluez
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 5.53-0ubuntu3.8, plus listed versions
5.50-0ubuntu45.51-0ubuntu15.51-0ubuntu25.52-0ubuntu15.52-0ubuntu2
Show 10 moreShow less
5.53-0ubuntu15.53-0ubuntu25.53-0ubuntu35.53-0ubuntu3.15.53-0ubuntu3.25.53-0ubuntu3.35.53-0ubuntu3.45.53-0ubuntu3.55.53-0ubuntu3.65.53-0ubuntu3.7
5.53-0ubuntu3.8
bluez
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 5.64-0ubuntu1.3, plus listed versions
5.60-0ubuntu25.62-0ubuntu15.62-0ubuntu25.63-0ubuntu15.63-0ubuntu25.64-0ubuntu15.64-0ubuntu1.1
5.64-0ubuntu1.3

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-3563 is a low vulnerability (CVSS 3.5) in Bluez, published October 17, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in bluez 5.63-4.

References

Show 8 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open