{"id":"CVE-2022-39176","aliases":["CLSA-2026-1777541445","DEBIAN-CVE-2022-39176","DLA-3157-1","DLA-3879-1","EUVD-2022-41721","GHSA-4hw3-29f2-2c2f","OESA-2022-1922","SUSE-SU-2023:0155-1","SUSE-SU-2023:0156-1","SUSE-SU-2023:0166-1","SUSE-SU-2023:0168-1","UBUNTU-CVE-2022-39176"],"status":"published","title":"BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because...","description":"BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00752,"percentile":0.55323,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-09-02T00:00:00Z","modified":"2026-11-03T06:02:44Z","fixes":[{"ecosystem":"Debian:12","package":"bluez","fixed_in":["5.61-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bluez","fixed_in":["5.61-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bluez","fixed_in":["5.61-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"bluez","fixed_in":["5.48-0ubuntu3.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"bluez","fixed_in":["5.53-0ubuntu3.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.44-7.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.44-7.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bluez-hid2hci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.44-7.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.44-7.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.44-7.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.61-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.61-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.61-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.50-1.2~deb10u3"}]}],"versions":["5.50-1","5.50-1.1","5.50-1.2~deb10u1","5.50-1.2~deb10u2"],"bundled":7},{"source":"osv","ecosystem":"Debian:11","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-3.1+deb11u2"}]}],"versions":["5.55-3.1","5.55-3.1+deb11u1"],"bundled":9},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-11.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-11.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-15.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-150000.5.46.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-150000.5.46.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-150000.5.46.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-150000.5.46.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-150200.13.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-150200.13.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-150200.13.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-150200.13.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.36.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-150300.3.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-150300.3.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-150300.3.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-150300.3.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-150300.3.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-150300.3.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-150300.3.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-150300.3.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-150300.3.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.35-0ubuntu2","5.36-0ubuntu1","5.37-0ubuntu5","5.37-0ubuntu5.1","5.37-0ubuntu5.3","5.37-0ubuntu5.3+esm1","5.37-0ubuntu5.3+esm2","5.37-0ubuntu5.3+esm3","5.37-0ubuntu5.3+esm4","5.37-0ubuntu5.3+esm5","5.37-0ubuntu5.3+esm6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-0ubuntu3.9"}]}],"versions":["5.46-0ubuntu3","5.46-0ubuntu4","5.48-0ubuntu3","5.48-0ubuntu3.1","5.48-0ubuntu3.2","5.48-0ubuntu3.3","5.48-0ubuntu3.4","5.48-0ubuntu3.5","5.48-0ubuntu3.6","5.48-0ubuntu3.7","5.48-0ubuntu3.8"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.53-0ubuntu3.6"}]}],"versions":["5.50-0ubuntu4","5.51-0ubuntu1","5.51-0ubuntu2","5.52-0ubuntu1","5.52-0ubuntu2","5.53-0ubuntu1","5.53-0ubuntu2","5.53-0ubuntu3","5.53-0ubuntu3.1","5.53-0ubuntu3.2","5.53-0ubuntu3.3","5.53-0ubuntu3.4","5.53-0ubuntu3.5"]}],"products":[{"vendor":"bluez","product":"bluez"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://ubuntu.com/security/notices/USN-5481-1","tags":["x_transferred","Issue Tracking","Third Party Advisory","advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/bluez/+bug/1977968","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20221020-0002/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00022.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39176","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20221020-0002"},{"url":"https://github.com/advisories/GHSA-4hw3-29f2-2c2f"},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1777541445.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39176.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-39176","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1922","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-39177","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230155-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1203120","tags":["report"]},{"url":"https://bugzilla.suse.com/1203121","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-39176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-39177","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230156-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230166-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230168-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-39176","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-39176","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-39176","description":"BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.","status":"published","published":"2022-09-02T00:00:00Z","modified":"2026-04-15T21:07:28.126Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:34:39.559326Z"}],"euvd":[{"id":"EUVD-2022-41721","description":"BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.","status":"published","published":"2022-09-02T00:00:00Z","modified":"2026-04-15T21:07:28Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:24:24.796113Z"}],"ghsa":[{"id":"GHSA-4hw3-29f2-2c2f","title":"BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because...","description":"BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.","status":"published","published":"2022-09-03T00:00:24Z","modified":"2025-11-04T18:31:42Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:04:34.447716Z"}],"nvd":[{"id":"CVE-2022-39176","description":"BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.","status":"published","published":"2022-09-02T04:15:11.427Z","modified":"2026-06-17T04:57:51.25Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"updated_at":"2026-11-02T14:07:26.802986Z"}],"osv":[{"id":"CVE-2022-39176","description":"BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.","status":"published","published":"2022-09-02T00:00:00Z","modified":"2026-10-28T02:30:59.127716135Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:26.53798Z"},{"id":"OESA-2022-1922","title":"bluez security update","description":"This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A.\r\n\r\nSecurity Fix(es):\r\n\r\nBlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c.(CVE-2022-39177)\r\n\r\nBlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.(CVE-2022-39176)","status":"published","published":"2022-09-16T11:05:14Z","modified":"2026-08-18T01:17:18.510359437Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2022-39176","description":"BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.","status":"published","published":"2022-09-02T04:15:00Z","modified":"2026-10-09T01:45:17.191337483Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:55.502114Z"},{"id":"CLSA-2026-1777541445","title":"bluez: Fix of 3 CVEs","description":"- CVE-2022-0204: fix heap overflow when appending prepare writes in gatt-server\n- CVE-2022-39176: fix not checking params_len in AVRCP vendordep PDU handling\n- CVE-2022-39177: fix accepting invalid/malformed capabilities in AVDTP","status":"published","published":"2026-05-02T01:09:55Z","modified":"2026-06-01T00:33:18.572463318Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DEBIAN-CVE-2022-39176","description":"BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.","status":"published","published":"2022-09-02T04:15:11.427Z","modified":"2026-11-03T06:02:44.317625819Z","updated_at":"2026-11-03T06:43:43.638289Z"},{"id":"DLA-3157-1","title":"bluez - security update","status":"published","published":"2022-10-24T00:00:00Z","modified":"2026-03-09T01:20:16.94095Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3879-1","title":"bluez - security update","status":"published","published":"2024-09-07T00:00:00Z","modified":"2026-03-09T01:18:30.227025Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"SUSE-SU-2023:0155-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2022-39176: Fixed a memory safety issue that could allow\n  physically proximate attackers to obtain sensitive information\n  (bsc#1203121).\n- CVE-2022-39177: Fixed a memory safety issue that could allow\n  physically proximate attackers to cause a denial of service\n  (bsc#1203120).\n","status":"published","published":"2023-01-26T14:46:40Z","modified":"2026-02-04T02:32:31.818426Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0156-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2022-39176: Fixed a memory safety issue that could allow\n  physically proximate attackers to obtain sensitive information\n  (bsc#1203121).\n- CVE-2022-39177: Fixed a memory safety issue that could allow\n  physically proximate attackers to cause a denial of service\n  (bsc#1203120).\n","status":"published","published":"2023-01-26T14:47:09Z","modified":"2026-02-04T02:31:14.861145Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0166-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2022-39176: Fixed a memory safety issue that could allow\n  physically proximate attackers to obtain sensitive information\n  (bsc#1203121).\n- CVE-2022-39177: Fixed a memory safety issue that could allow\n  physically proximate attackers to cause a denial of service\n  (bsc#1203120).\n","status":"published","published":"2023-01-26T17:27:55Z","modified":"2025-05-02T04:33:31.660171Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0168-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2022-39176: Fixed a memory safety issue that could allow\n  physically proximate attackers to obtain sensitive information\n  (bsc#1203121).\n- CVE-2022-39177: Fixed a memory safety issue that could allow\n  physically proximate attackers to cause a denial of service\n  (bsc#1203120).\n","status":"published","published":"2023-01-26T17:29:32Z","modified":"2026-02-04T03:56:44.501846Z","updated_at":"2026-11-02T15:53:51.853735Z"}]}}