Every CVE Search/ Get API key

CVE-2021-3658

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered...

6.5 MediumFix available

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.79%Down 0.2 points since Mar 3, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

Record
CVE-2021-3658
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
3.3 LowAV:A/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-863
Updated
2026-11-02
CVE List 6.5

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

Record
CVE-2021-3658
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-863
Updated
2026-11-02
EUVDEUVD-2021-26953 6.5

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

Record
EUVD-2021-26953
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-839c-8x38-qf59 6.5

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered...

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

Record
GHSA-839c-8x38-qf59
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-863
Updated
2026-11-02
OSV 6.5

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

Record
CVE-2021-3658
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2021-3658 6.5

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

Record
DEBIAN-CVE-2021-3658
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 7 moreShow less
OSVOESA-2021-1370 7.5

bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A.

Security Fix(es):

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.(CVE-2021-3658)

Record
OESA-2021-1370
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-3658 6.5

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

Record
UBUNTU-CVE-2021-3658
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVMGASA-2021-0395 No score

Updated bluez packages fix security vulnerability

Updated bluez packages fix security vulnerability:

Adapter incorrectly restores Discoverable state after powered down (CVE-2021-3658).

Record
MGASA-2021-0395
Updated
2026-11-02
OSVSUSE-SU-2022:3687-1 No score

Security update for bluez

This update for bluez fixes the following issues:

  • CVE-2021-0129: Fixed improper access control (bsc#1186463).
  • CVE-2020-26558: Fixed vulnerability that may permit a nearby man-in-the-middle attacker to identify the Passkey (bsc#1186463).
  • CVE-2019-8921: Fixed heap-based buffer overflow via crafted request (bsc#1193237).
  • CVE-2019-8922: Fixed heap-based buffer overflow via crafted request (bsc#1193227).
  • CVE-2021-3658: Fixed adapter incorrectly restoring discoverable state after powered down (bsc#1188859).
  • CVE-2021-43400: Fixed use-after-free in gatt-database.c (bsc#1192394).
Record
SUSE-SU-2022:3687-1
Updated
2026-11-02
OSVSUSE-SU-2022:3691-1 No score

Security update for bluez

This update for bluez fixes the following issues:

  • CVE-2019-8921: Fixed heap-based buffer overflow via crafted request (bsc#1193237).
  • CVE-2019-8922: Fixed heap-based buffer overflow via crafted request (bsc#1193227).
  • CVE-2020-26558: Fixed vulnerability that may permit a nearby man-in-the-middle attacker to identify the Passkey (bsc#1186463).
  • CVE-2021-0129: Fixed improper access control (bsc#1186463).
  • CVE-2021-3658: Fixed adapter incorrectly restoring discoverable state after powered down (bsc#1188859).
  • CVE-2021-43400: Fixed use-after-free in gatt-database.c (bsc#1192394).
Record
SUSE-SU-2022:3691-1
Updated
2026-11-02
OSVSUSE-SU-2022:3981-1 No score

Security update for bluez

This update for bluez fixes the following issues:

  • CVE-2021-43400: Fixed use-after-free in gatt-database.c (bsc#1192394).
  • CVE-2021-3658: Fixed adapter incorrectly restoring discoverable state after powered down (bsc#1188859).
Record
SUSE-SU-2022:3981-1
Updated
2026-11-02
OSVUSN-5155-1 No score

bluez vulnerabilities

It was discovered that BlueZ incorrectly handled the Discoverable status when a device is powered down. This could result in devices being powered up discoverable, contrary to expectations. This issue only affected Ubuntu 20.04 LTS, Ubuntu 21.04, and Ubuntu 21.10. (CVE-2021-3658)

It was discovered that BlueZ incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause BlueZ to consume resources, leading to a denial of service. (CVE-2021-41229)

It was discovered that the BlueZ gatt server incorrectly handled disconnects. A remote attacker could possibly use this issue to cause BlueZ to crash, leading to a denial of service. (CVE-2021-43400)

Record
USN-5155-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bluez
Debian:12
 before 5.61-1
5.61-1
bluez
Debian:13
 before 5.61-1
5.61-1
bluez
Debian:14
 before 5.61-1
5.61-1
bluez
Debian:11
From an advisory covering 9 CVEs
 before 5.55-3.1+deb11u2, plus listed versions
5.55-3.15.55-3.1+deb11u1
5.55-3.1+deb11u2
bluez
Mageia:8
 before 5.55-3.2.mga8
5.55-3.2.mga8
bluez
openEuler:20.03-LTS-SP1
 before 5.54-5.oe1
5.54-5.oe1
bluez
openEuler:20.03-LTS-SP2
 before 5.54-5.oe1
5.54-5.oe1
bluez
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 6 CVEs
 before 5.48-150000.5.41.1
5.48-150000.5.41.1
bluez
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 6 CVEs
 before 5.48-150000.5.41.1
5.48-150000.5.41.1
bluez
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 6 CVEs
 before 5.48-150000.5.41.1
5.48-150000.5.41.1
Show 23 moreShow less
Affected packages
PackageAffectedFixed
bluez
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 6 CVEs
 before 5.48-150000.5.41.1
5.48-150000.5.41.1
bluez
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 6 CVEs
 before 5.48-150000.5.41.1
5.48-150000.5.41.1
bluez
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 6 CVEs
 before 5.48-150000.5.41.1
5.48-150000.5.41.1
bluez
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 6 CVEs
 before 5.48-150000.5.41.1
5.48-150000.5.41.1
bluez
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 6 CVEs
 before 5.48-150000.5.41.1
5.48-150000.5.41.1
bluez
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 6 CVEs
 before 5.48-150000.5.41.1
5.48-150000.5.41.1
bluez
SUSE:Enterprise Storage 6
From an advisory covering 6 CVEs
 before 5.48-150000.5.41.1
5.48-150000.5.41.1
bluez
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 6 CVEs
 before 5.48-150200.13.17.1
5.48-150200.13.17.1
bluez
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 6 CVEs
 before 5.48-150200.13.17.1
5.48-150200.13.17.1
bluez
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 6 CVEs
 before 5.48-150200.13.17.1
5.48-150200.13.17.1
bluez
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 6 CVEs
 before 5.48-150200.13.17.1
5.48-150200.13.17.1
bluez
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 6 CVEs
 before 5.48-150200.13.17.1
5.48-150200.13.17.1
bluez
SUSE:Manager Proxy 4.1
From an advisory covering 6 CVEs
 before 5.48-150200.13.17.1
5.48-150200.13.17.1
bluez
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 6 CVEs
 before 5.48-150200.13.17.1
5.48-150200.13.17.1
bluez
SUSE:Manager Server 4.1
From an advisory covering 6 CVEs
 before 5.48-150200.13.17.1
5.48-150200.13.17.1
bluez
SUSE:Enterprise Storage 7
From an advisory covering 6 CVEs
 before 5.48-150200.13.17.1
5.48-150200.13.17.1
bluez
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 2 CVEs
 before 5.55-150300.3.14.1
5.55-150300.3.14.1
bluez
SUSE:Linux Enterprise Module for Desktop Applications 15 SP3
From an advisory covering 2 CVEs
 before 5.55-150300.3.14.1
5.55-150300.3.14.1
bluez
SUSE:Linux Enterprise Workstation Extension 15 SP3
From an advisory covering 2 CVEs
 before 5.55-150300.3.14.1
5.55-150300.3.14.1
bluez
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 5.55-150300.3.14.1
5.55-150300.3.14.1
bluez
Ubuntu:20.04:LTS
 before 5.53-0ubuntu3.4, plus listed versions
5.50-0ubuntu45.51-0ubuntu15.51-0ubuntu25.52-0ubuntu15.52-0ubuntu2
Show 6 moreShow less
5.53-0ubuntu15.53-0ubuntu25.53-0ubuntu35.53-0ubuntu3.15.53-0ubuntu3.25.53-0ubuntu3.3
5.53-0ubuntu3.4
bluez
Ubuntu:18.04:LTS
From an advisory covering 3 CVEs
 before 5.48-0ubuntu3.6, plus listed versions
5.46-0ubuntu35.46-0ubuntu45.48-0ubuntu35.48-0ubuntu3.15.48-0ubuntu3.25.48-0ubuntu3.35.48-0ubuntu3.45.48-0ubuntu3.5
5.48-0ubuntu3.6
bluez
Ubuntu:20.04:LTS
From an advisory covering 3 CVEs
 before 5.53-0ubuntu3.4, plus listed versions
5.50-0ubuntu45.51-0ubuntu15.51-0ubuntu25.52-0ubuntu15.52-0ubuntu2
Show 6 moreShow less
5.53-0ubuntu15.53-0ubuntu25.53-0ubuntu35.53-0ubuntu3.15.53-0ubuntu3.25.53-0ubuntu3.3
5.53-0ubuntu3.4

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-3658 is a medium vulnerability (CVSS 6.5) in Bluez, published July 28, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.79%, the 56th percentile. Fixed in bluez 5.61-1.

References

Show 25 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open