CVE-2022-0204
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with...
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
- Record
CVE-2022-0204- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 5.8 Medium
AV:A/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119, CWE-190
- Updated
- 2026-11-02
CVE List
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
- Record
CVE-2022-0204- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
EUVDEUVD-2022-15406
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
- Record
EUVD-2022-15406- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-g2fr-rq52-c2h3
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with...
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
- Record
GHSA-g2fr-rq52-c2h3- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119, CWE-190, CWE-787
- Updated
- 2026-11-02
OSV
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
- Record
CVE-2022-0204- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-0204
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
- Record
DEBIAN-CVE-2022-0204- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
Show 10 moreShow less
OSVOESA-2022-1595
bluez security update
This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A.
Security Fix(es):
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.(CVE-2022-0204)
- Record
OESA-2022-1595- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-0204
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
- Record
UBUNTU-CVE-2022-0204- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1777541445 No score
bluez: Fix of 3 CVEs
- CVE-2022-0204: fix heap overflow when appending prepare writes in gatt-server
- CVE-2022-39176: fix not checking params_len in AVRCP vendordep PDU handling
- CVE-2022-39177: fix accepting invalid/malformed capabilities in AVDTP
- Record
CLSA-2026-1777541445- Updated
- 2026-11-02
OSVMGASA-2022-0058 No score
Updated bluez packages fix security vulnerability
Ziming Zhang discovered that BlueZ incorrectly handled memory write operations in its gatt server. A remote attacker could possibly use this to cause BlueZ to crash leading to a denial of service, or potentially remotely execute code. (CVE-2022-0204)
- Record
MGASA-2022-0058- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12394-1 No score
bluez-5.65-3.1 on GA media
These are all security issues fixed in the bluez-5.65-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12394-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2837-1 No score
Security update for bluez
This update for bluez fixes the following issues:
- CVE-2022-0204: Fixed a buffer overflow in the implementation of the gatt protocol (bsc#1194704).
- Record
SUSE-SU-2022:2837-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2883-1 No score
Security update for bluez
This update for bluez fixes the following issues:
- CVE-2022-0204: Fixed a buffer overflow in the implementation of the gatt protocol (bsc#1194704).
- Record
SUSE-SU-2022:2883-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2948-1 No score
Security update for bluez
This update for bluez fixes the following issues:
- CVE-2022-0204: Fixed a buffer overflow in the implementation of the gatt protocol (bsc#1194704).
- CVE-2019-8922: Fixed a buffer overflow in the implementation of the Service Discovery Protocol (bsc#1193227).
- Record
SUSE-SU-2022:2948-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:3247-1 No score
Security update for bluez
This update for bluez fixes the following issues:
- CVE-2022-0204: Fixed check if the prepare writes would append more than the allowed maximum attribute length (bsc#1194704).
- Record
SUSE-SU-2022:3247-1- Updated
- 2026-11-02
OSVUSN-5275-1 No score
bluez vulnerability
Ziming Zhang discovered that BlueZ incorrectly handled memory write operations in its gatt server. A remote attacker could possibly use this to cause BlueZ to crash leading to a denial of service, or potentially remotely execute code. (CVE-2022-0204)
- Record
USN-5275-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bluezTuxCare:CentOS:7 From an advisory covering 3 CVEs |
before 5.44-7.el7.tuxcare.els1 | 5.44-7.el7.tuxcare.els1 |
bluez-cupsTuxCare:CentOS:7 From an advisory covering 3 CVEs |
before 5.44-7.el7.tuxcare.els1 | 5.44-7.el7.tuxcare.els1 |
bluez-hid2hciTuxCare:CentOS:7 From an advisory covering 3 CVEs |
before 5.44-7.el7.tuxcare.els1 | 5.44-7.el7.tuxcare.els1 |
bluez-libsTuxCare:CentOS:7 From an advisory covering 3 CVEs |
before 5.44-7.el7.tuxcare.els1 | 5.44-7.el7.tuxcare.els1 |
bluez-libs-develTuxCare:CentOS:7 From an advisory covering 3 CVEs |
before 5.44-7.el7.tuxcare.els1 | 5.44-7.el7.tuxcare.els1 |
bluezDebian:12 |
before 5.64-1 | 5.64-1 |
bluezDebian:13 |
before 5.64-1 | 5.64-1 |
bluezDebian:14 |
before 5.64-1 | 5.64-1 |
bluezDebian:10 From an advisory covering 7 CVEs |
before 5.50-1.2~deb10u3, plus listed versions 5.50-15.50-1.15.50-1.2~deb10u15.50-1.2~deb10u2 |
5.50-1.2~deb10u3 |
bluezDebian:11 From an advisory covering 9 CVEs |
before 5.55-3.1+deb11u2, plus listed versions 5.55-3.15.55-3.1+deb11u1 |
5.55-3.1+deb11u2 |
Show 36 moreShow less
| Package | Affected | Fixed |
|---|---|---|
bluezMageia:8 |
before 5.55-3.4.mga8 | 5.55-3.4.mga8 |
bluezopenEuler:20.03-LTS-SP1 |
before 5.54-9.oe1 | 5.54-9.oe1 |
bluezopenEuler:20.03-LTS-SP2 |
before 5.54-9.oe1 | 5.54-9.oe1 |
bluezopenEuler:20.03-LTS-SP3 |
before 5.54-9.oe1 | 5.54-9.oe1 |
bluezSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 5.48-150000.5.31.1 | 5.48-150000.5.31.1 |
bluezSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 5.48-150000.5.31.1 | 5.48-150000.5.31.1 |
bluezSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 5.48-150000.5.31.1 | 5.48-150000.5.31.1 |
bluezSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 5.48-150000.5.31.1 | 5.48-150000.5.31.1 |
bluezSUSE:Linux Enterprise Server 15-LTSS |
before 5.48-150000.5.31.1 | 5.48-150000.5.31.1 |
bluezSUSE:Linux Enterprise Server 15 SP1-BCL |
before 5.48-150000.5.31.1 | 5.48-150000.5.31.1 |
bluezSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 5.48-150000.5.31.1 | 5.48-150000.5.31.1 |
bluezSUSE:Linux Enterprise Server for SAP Applications 15 |
before 5.48-150000.5.31.1 | 5.48-150000.5.31.1 |
bluezSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 5.48-150000.5.31.1 | 5.48-150000.5.31.1 |
bluezSUSE:Enterprise Storage 6 |
before 5.48-150000.5.31.1 | 5.48-150000.5.31.1 |
bluezSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 5.55-150300.3.11.1 | 5.55-150300.3.11.1 |
bluezSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 |
before 5.55-150300.3.11.1 | 5.55-150300.3.11.1 |
bluezSUSE:Linux Enterprise Workstation Extension 15 SP3 |
before 5.55-150300.3.11.1 | 5.55-150300.3.11.1 |
bluezopenSUSE:Leap 15.3 |
before 5.55-150300.3.11.1 | 5.55-150300.3.11.1 |
bluezSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 2 CVEs |
before 5.48-150200.13.8.1 | 5.48-150200.13.8.1 |
bluezSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 2 CVEs |
before 5.48-150200.13.8.1 | 5.48-150200.13.8.1 |
bluezSUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 2 CVEs |
before 5.48-150200.13.8.1 | 5.48-150200.13.8.1 |
bluezSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 2 CVEs |
before 5.48-150200.13.8.1 | 5.48-150200.13.8.1 |
bluezSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 2 CVEs |
before 5.48-150200.13.8.1 | 5.48-150200.13.8.1 |
bluezSUSE:Manager Proxy 4.1 From an advisory covering 2 CVEs |
before 5.48-150200.13.8.1 | 5.48-150200.13.8.1 |
bluezSUSE:Manager Retail Branch Server 4.1 From an advisory covering 2 CVEs |
before 5.48-150200.13.8.1 | 5.48-150200.13.8.1 |
bluezSUSE:Manager Server 4.1 From an advisory covering 2 CVEs |
before 5.48-150200.13.8.1 | 5.48-150200.13.8.1 |
bluezSUSE:Enterprise Storage 7 From an advisory covering 2 CVEs |
before 5.48-150200.13.8.1 | 5.48-150200.13.8.1 |
bluezSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 5.62-150400.4.5.1 | 5.62-150400.4.5.1 |
bluezSUSE:Linux Enterprise Module for Desktop Applications 15 SP4 |
before 5.62-150400.4.5.1 | 5.62-150400.4.5.1 |
bluezSUSE:Linux Enterprise Workstation Extension 15 SP4 |
before 5.62-150400.4.5.1 | 5.62-150400.4.5.1 |
bluezopenSUSE:Leap 15.4 |
before 5.62-150400.4.5.1 | 5.62-150400.4.5.1 |
bluezUbuntu:Pro:16.04:LTS |
before 5.37-0ubuntu5.3+esm2, plus listed versions 5.35-0ubuntu25.36-0ubuntu15.37-0ubuntu55.37-0ubuntu5.15.37-0ubuntu5.35.37-0ubuntu5.3+esm1 |
5.37-0ubuntu5.3+esm2 |
bluezUbuntu:18.04:LTS |
before 5.48-0ubuntu3.8, plus listed versions 5.46-0ubuntu35.46-0ubuntu45.48-0ubuntu35.48-0ubuntu3.15.48-0ubuntu3.2 Show 5 moreShow less5.48-0ubuntu3.35.48-0ubuntu3.45.48-0ubuntu3.55.48-0ubuntu3.65.48-0ubuntu3.7 |
5.48-0ubuntu3.8 |
bluezUbuntu:20.04:LTS |
before 5.53-0ubuntu3.5, plus listed versions 5.50-0ubuntu45.51-0ubuntu15.51-0ubuntu25.52-0ubuntu15.52-0ubuntu2 Show 7 moreShow less5.53-0ubuntu15.53-0ubuntu25.53-0ubuntu35.53-0ubuntu3.15.53-0ubuntu3.25.53-0ubuntu3.35.53-0ubuntu3.4 |
5.53-0ubuntu3.5 |
bluezUbuntu:22.04:LTS |
before 5.63-0ubuntu1, plus listed versions 5.60-0ubuntu25.62-0ubuntu15.62-0ubuntu2 |
5.63-0ubuntu1 |
bluezopenSUSE:Tumbleweed |
before 5.65-3.1 | 5.65-3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-0204 is a high vulnerability (CVSS 8.8) in Bluez, published January 24, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.79%, the 78th percentile. Fixed in bluez 5.64-1.
References
bugzilla.redhat.com/show_bug.cgi?id=2039807
github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q
security.gentoo.org/glsa/202209-16
lists.debian.org/debian-lts-announce/2022/10/msg00026.html
Show 19 moreShow less
nvd.nist.gov/vuln/detail/CVE-2022-0204
errata.tuxcare.com/els_os/centos7els/CLSA-2026-1777541445.html
security-tracker.debian.org/tracker/CVE-2022-0204
advisories.mageia.org/MGASA-2022-0058.html
bugs.mageia.org/show_bug.cgi?id=30015
ubuntu.com/security/notices/USN-5275-1
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1595
suse.com/support/update/announcement/2022/suse-su-20222837-1
bugzilla.suse.com/1194704
cve.org/CVERecord?id=CVE-2022-0204