MGASA-2022-0235
Updated bluez packages fix security vulnerability
It was discovered that BlueZ incorrectly validated certain capabilities and lengths when handling the A2DP profile. A remote attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly execute arbitrary code.
What each source reports
OSV No score
Updated bluez packages fix security vulnerability
It was discovered that BlueZ incorrectly validated certain capabilities and lengths when handling the A2DP profile. A remote attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly execute arbitrary code.
- Record
MGASA-2022-0235- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bluezMageia:8 |
before 5.55-3.5.mga8 | 5.55-3.5.mga8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2022-0235 is a vulnerability with no CVSS score yet in bluez, published June 18, 2022. No source lists public exploit code. Fixed in bluez 5.55-3.5.mga8.