{"id":"CVE-2023-45866","aliases":["A-294854926","ALSA-2024:11154","ALSA-2024:9413","ASB-A-294854926","AZL-32161","AZL-34571","BELL-CVE-2023-45866","CLSA-2025-1763031616","DEBIAN-CVE-2023-45866","DLA-3689-1","DSA-5584-1","EUVD-2023-50132","GHSA-qjcj-xg77-6c32","MGASA-2023-0353","OESA-2023-1948","RHSA-2024:11154","RHSA-2024:9413","RLSA-2024:9413","SUSE-SU-2025:03269-1","SUSE-SU-2025:03277-1","SUSE-SU-2025:03590-1","SUSE-SU-2025:20804-1","SUSE-SU-2026:20041-1","UBUNTU-CVE-2023-45866","USN-6540-1","openSUSE-SU-2024:13507-1"],"status":"published","title":"Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate...","description":"Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.07879,"percentile":0.94747,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-287"],"published":"2023-12-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","exploits":[{"source":"pocgithub","id":"Eason-zz/BluetoothDucky","title":"Eason-zz/BluetoothDucky","date":"2024-01-16","url":"https://github.com/Eason-zz/BluetoothDucky"},{"source":"pocgithub","id":"pentestfunctions/BlueDucky","title":"pentestfunctions/BlueDucky","date":"2024-01-16","url":"https://github.com/pentestfunctions/BlueDucky"},{"source":"pocgithub","id":"jjjjjjjj987/cve-2023-45866-py","title":"jjjjjjjj987/cve-2023-45866-py","date":"2024-01-23","url":"https://github.com/jjjjjjjj987/cve-2023-45866-py"},{"source":"pocgithub","id":"cisnarfu/Bluepop","title":"cisnarfu/Bluepop","date":"2024-06-29","url":"https://github.com/cisnarfu/Bluepop"},{"source":"pocgithub","id":"AvishekDhakal/CVE-2023-45866_EXPLOITS","title":"AvishekDhakal/CVE-2023-45866_EXPLOITS","date":"2024-09-02","url":"https://github.com/AvishekDhakal/CVE-2023-45866_EXPLOITS"},{"source":"pocgithub","id":"Chedrian07/CVE-2023-45866-POC","title":"Chedrian07/CVE-2023-45866-POC","date":"2024-10-09","url":"https://github.com/Chedrian07/CVE-2023-45866-POC"},{"source":"pocgithub","id":"Danyw24/blueXploit","title":"Danyw24/blueXploit","date":"2024-12-15","url":"https://github.com/Danyw24/blueXploit"},{"source":"pocgithub","id":"xG3nesis/RustyInjector","title":"xG3nesis/RustyInjector","date":"2024-12-20","url":"https://github.com/xG3nesis/RustyInjector"},{"source":"pocgithub","id":"h4r-m0n1e/CVE-2023-45866_WIP","title":"h4r-m0n1e/CVE-2023-45866_WIP","date":"2025-03-27","url":"https://github.com/h4r-m0n1e/CVE-2023-45866_WIP"},{"source":"pocgithub","id":"Sergeb250/BlueDucky","title":"Sergeb250/BlueDucky","date":"2025-08-26","url":"https://github.com/Sergeb250/BlueDucky"},{"source":"pocgithub","id":"hegaz0y/-BuL","title":"hegaz0y/-BuL","date":"2026-05-31","url":"https://github.com/hegaz0y/-BuL"},{"source":"pocgithub","id":"KiroShehata/CVE-2023-45866-Bluetooth-Security-Research","title":"KiroShehata/CVE-2023-45866-Bluetooth-Security-Research","date":"2026-10-05","url":"https://github.com/KiroShehata/CVE-2023-45866-Bluetooth-Security-Research"}],"fixes":[{"ecosystem":"AlmaLinux:8","package":"bluez","fixed_in":["5.63-3.el8_10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"bluez-cups","fixed_in":["5.63-3.el8_10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"bluez-hid2hci","fixed_in":["5.63-3.el8_10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"bluez-libs","fixed_in":["5.63-3.el8_10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"bluez-libs-devel","fixed_in":["5.63-3.el8_10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"bluez-obexd","fixed_in":["5.63-3.el8_10.alma.1"],"sources":["osv"]},{"ecosystem":"Android","package":"platform/packages/modules/Bluetooth","fixed_in":["14-next:2023-12-05","13:2023-12-05","14:2023-12-05"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"bluez","fixed_in":["5.63-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"bluez","fixed_in":["5.63-6"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"bluez","fixed_in":["5.66-r2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"bluez","fixed_in":["5.66-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bluez","fixed_in":["5.70-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bluez","fixed_in":["5.70-1.1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"bluez","fixed_in":["5.50-1.2~deb10u4"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"bluez","fixed_in":["5.55-3.1+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"bluez","fixed_in":["5.70-1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"bluez","fixed_in":["5.54-13.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"bluez","fixed_in":["5.54-13.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"bluez","fixed_in":["5.54-13.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"bluez","fixed_in":["5.54-18.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"bluez","fixed_in":["5.54-18.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"bluez","fixed_in":["5.54-18.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-cups","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-cups-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-debugsource","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-hid2hci-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-libs-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-obexd-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-cups-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-debugsource","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-hid2hci","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-hid2hci-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-libs","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-libs-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-obexd","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-obexd-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-cups-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-debugsource","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-hid2hci-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-libs-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-libs-devel","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-obexd-debuginfo","fixed_in":["0:5.63-3.el8_10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"bluez","fixed_in":["5.65-150500.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"bluez","fixed_in":["5.62-150400.4.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"bluez","fixed_in":["5.62-150400.4.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"bluez","fixed_in":["5.13-5.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"bluez","fixed_in":["5.70-slfo.1.1_2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"bluez","fixed_in":["5.70-2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bluez","fixed_in":["5.37-0ubuntu5.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bluez","fixed_in":["5.48-0ubuntu3.9+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"bluez","fixed_in":["5.53-0ubuntu3.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"bluez","fixed_in":["5.64-0ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"bluez","fixed_in":["5.70-0ubuntu3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"bluez","fixed_in":["5.70-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.63-3.el8_10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.63-3.el8_10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bluez-hid2hci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.63-3.el8_10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.63-3.el8_10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.63-3.el8_10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bluez-obexd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.63-3.el8_10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez-obexd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Android","package":"platform/packages/modules/Bluetooth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14-next:0"},{"fixed":"14-next:2023-12-05"}]}],"versions":["14-next"]},{"source":"osv","ecosystem":"Android","package":"platform/packages/modules/Bluetooth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-12-05"}]}],"versions":["13"]},{"source":"osv","ecosystem":"Android","package":"platform/packages/modules/Bluetooth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2023-12-05"}]}],"versions":["14"]},{"source":"osv","ecosystem":"Azure Linux:2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.63-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.63-6"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.66-r1"},{"fixed":"5.66-r2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-hid2hci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-mesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-obexd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"Debian:12","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.66-1+deb12u1"}]}],"versions":["5.66-1"]},{"source":"osv","ecosystem":"Debian:13","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.70-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.70-1.1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.50-1.2~deb10u4"}]}],"versions":["5.50-1","5.50-1.1","5.50-1.2~deb10u1","5.50-1.2~deb10u2","5.50-1.2~deb10u3"]},{"source":"osv","ecosystem":"Debian:11","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-3.1+deb11u1"}]}],"versions":["5.55-3.1"]},{"source":"osv","ecosystem":"Debian:12","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.66-1+deb12u1"}]}],"versions":["5.66-1"]},{"source":"osv","ecosystem":"Mageia:9","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.70-1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-13.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-13.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-13.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-18.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-18.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-18.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-hid2hci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-obexd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.63-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-libs-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-mesh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-obexd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-libs-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-mesh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-libs-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-mesh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.65-150500.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.62-150400.4.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.62-150400.4.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.70-slfo.1.1_2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.70-2.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-0ubuntu5.3+esm3"}]}],"versions":["5.35-0ubuntu2","5.36-0ubuntu1","5.37-0ubuntu5","5.37-0ubuntu5.1","5.37-0ubuntu5.3","5.37-0ubuntu5.3+esm1","5.37-0ubuntu5.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-0ubuntu3.9+esm1"}]}],"versions":["5.46-0ubuntu3","5.46-0ubuntu4","5.48-0ubuntu3","5.48-0ubuntu3.1","5.48-0ubuntu3.2","5.48-0ubuntu3.3","5.48-0ubuntu3.4","5.48-0ubuntu3.5","5.48-0ubuntu3.6","5.48-0ubuntu3.7","5.48-0ubuntu3.8","5.48-0ubuntu3.9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.53-0ubuntu3.7"}]}],"versions":["5.50-0ubuntu4","5.51-0ubuntu1","5.51-0ubuntu2","5.52-0ubuntu1","5.52-0ubuntu2","5.53-0ubuntu1","5.53-0ubuntu2","5.53-0ubuntu3","5.53-0ubuntu3.1","5.53-0ubuntu3.2","5.53-0ubuntu3.3","5.53-0ubuntu3.4","5.53-0ubuntu3.5","5.53-0ubuntu3.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.64-0ubuntu1.1"}]}],"versions":["5.60-0ubuntu2","5.62-0ubuntu1","5.62-0ubuntu2","5.63-0ubuntu1","5.63-0ubuntu2","5.64-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.70-0ubuntu3"}]}],"versions":["5.68-0ubuntu1","5.70-0ubuntu1","5.70-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-0ubuntu5.3+esm3"}]}],"versions":["5.35-0ubuntu2","5.36-0ubuntu1","5.37-0ubuntu5","5.37-0ubuntu5.1","5.37-0ubuntu5.3","5.37-0ubuntu5.3+esm1","5.37-0ubuntu5.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-0ubuntu3.9+esm1"}]}],"versions":["5.46-0ubuntu3","5.46-0ubuntu4","5.48-0ubuntu3","5.48-0ubuntu3.1","5.48-0ubuntu3.2","5.48-0ubuntu3.3","5.48-0ubuntu3.4","5.48-0ubuntu3.5","5.48-0ubuntu3.6","5.48-0ubuntu3.7","5.48-0ubuntu3.8","5.48-0ubuntu3.9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.53-0ubuntu3.7"}]}],"versions":["5.50-0ubuntu4","5.51-0ubuntu1","5.51-0ubuntu2","5.52-0ubuntu1","5.52-0ubuntu2","5.53-0ubuntu1","5.53-0ubuntu2","5.53-0ubuntu3","5.53-0ubuntu3.1","5.53-0ubuntu3.2","5.53-0ubuntu3.3","5.53-0ubuntu3.4","5.53-0ubuntu3.5","5.53-0ubuntu3.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.64-0ubuntu1.1"}]}],"versions":["5.60-0ubuntu2","5.62-0ubuntu1","5.62-0ubuntu2","5.63-0ubuntu1","5.63-0ubuntu2","5.64-0ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.70-2.1"}]}]}],"products":[{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"google","product":"android"}],"references":[{"url":"https://bluetooth.com","tags":["x_transferred","Not Applicable","web"]},{"url":"http://changelogs.ubuntu.com/changelogs/pool/main/b/bluez/bluez_5.64-0ubuntu1/changelog","tags":["x_transferred","Release Notes","advisory"]},{"url":"https://github.com/skysafe/reblog/tree/main/cve-2023-45866","tags":["x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/profiles/input?id=25a471a83e02e1effb15d5a488b3f0085eaeb675","tags":["x_transferred","Mailing List","Patch","fix","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D2N2P5LMP3V7IJONALV2KOFL4NUU23CJ/","tags":["vendor-advisory","x_transferred","Mailing List","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/77YQQS5FXPYE6WBBZO3REFIRAUJHERFA/","tags":["vendor-advisory","x_transferred","Mailing List","article"]},{"url":"https://support.apple.com/kb/HT214036","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT214035","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2023/Dec/9","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2023/Dec/7","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00011.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2023/dsa-5584","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202401-03","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/77YQQS5FXPYE6WBBZO3REFIRAUJHERFA/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2N2P5LMP3V7IJONALV2KOFL4NUU23CJ/","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45866","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/77YQQS5FXPYE6WBBZO3REFIRAUJHERFA"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D2N2P5LMP3V7IJONALV2KOFL4NUU23CJ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/77YQQS5FXPYE6WBBZO3REFIRAUJHERFA"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2N2P5LMP3V7IJONALV2KOFL4NUU23CJ"},{"url":"https://github.com/advisories/GHSA-qjcj-xg77-6c32"},{"url":"https://access.redhat.com/errata/RHSA-2024:11154","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45866","tags":["report"]},{"url":"https://bugzilla.redhat.com/2253391","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-11154.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9413","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27349","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44431","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50229","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50230","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51580","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51589","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51592","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51594","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51596","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278787","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278945","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278955","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278962","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278965","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278967","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278969","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278972","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278974","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-9413.html","tags":["advisory"]},{"url":"https://source.android.com/security/bulletin/2023-12-01","tags":["advisory"]},{"url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/25a7d9aaceea0f7d6cb4ae3da5aa66efb0bc7db8","tags":["fix"]},{"url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/f4e439c22354f0aa868a982bc88bcc9de3bc37f7","tags":["fix"]},{"url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/a99edb35d6c044dbd607a74b88102bf2f36d5ef5","tags":["fix"]},{"url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/9194524a92e0f5859caeab1ff487d21d9b513d0b","tags":["fix"]},{"url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5673b3c6bbe8c6c9edb8afb5e9499dc3a41d3943","tags":["fix"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-45866","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1763031616.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-45866","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0353.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32604","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6540-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1948","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253391","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_11154.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45866","tags":["advisory","report"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278974","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9413.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27349","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27349","tags":["advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-386/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44431","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44431","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50229","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50229","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50230","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50230","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51580","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51580","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51589","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51589","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51592","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51592","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51594","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51594","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51596","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51596","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9413","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503269-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1217877","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45866","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503277-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503590-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520804-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620041-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-45866","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-45866","description":"Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.","status":"published","published":"2023-12-08T00:00:00Z","modified":"2025-11-04T19:25:32.7Z","updated_at":"2026-11-02T14:35:22.984825Z"}],"euvd":[{"id":"EUVD-2023-50132","description":"Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.","status":"published","published":"2023-12-08T00:00:00Z","modified":"2025-11-04T19:25:32Z","updated_at":"2026-11-02T19:49:21.645169Z"}],"ghsa":[{"id":"GHSA-qjcj-xg77-6c32","title":"Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate...","description":"Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.","status":"published","published":"2023-12-08T06:30:38Z","modified":"2025-11-04T21:31:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:04:37.582006Z"}],"nvd":[{"id":"CVE-2023-45866","description":"Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.","status":"published","published":"2023-12-08T06:15:45.69Z","modified":"2026-06-17T06:29:41.11Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:08:54.010507Z"}],"osv":[{"id":"AZL-32161","title":"CVE-2023-45866 affecting package bluez for versions less than 5.63-5","description":"Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.","status":"published","published":"2023-12-08T06:15:45Z","modified":"2026-04-21T04:26:41.461827Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-34571","title":"CVE-2023-45866 affecting package bluez for versions less than 5.63-6","description":"Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.","status":"published","published":"2023-12-08T06:15:45Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"BELL-CVE-2023-45866","status":"published","published":"2023-12-07T05:59:21.184771Z","modified":"2026-01-26T09:35:33.926129Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-45866","description":"Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.","status":"published","published":"2023-12-08T06:15:45.69Z","modified":"2026-04-16T04:35:11.418329859Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:34.287121Z"},{"id":"DEBIAN-CVE-2023-45866","description":"Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.","status":"published","published":"2023-12-08T06:15:45.69Z","modified":"2026-10-26T18:02:34.393360173Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"OESA-2023-1948","title":"bluez security update","description":"This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A.\r\n\r\nSecurity Fix(es):\r\n\r\nBluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.(CVE-2023-45866)","status":"published","published":"2023-12-22T11:06:23Z","modified":"2026-08-18T01:18:06.509218164Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:11154","title":"Red Hat Security Advisory: bluez security update","status":"published","published":"2024-12-18T10:06:00Z","modified":"2026-06-26T12:22:24.272294639Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:9413","title":"Red Hat Security Advisory: bluez security update","status":"published","published":"2024-11-12T18:06:36Z","modified":"2026-08-07T10:16:43Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"UBUNTU-CVE-2023-45866","description":"Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.","status":"published","published":"2023-12-06T00:00:00Z","modified":"2026-04-22T14:13:24.495497Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2024:11154","title":"Moderate: bluez security update","description":"The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.   \n\nSecurity Fix(es):  \n\n  * bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2024-12-17T00:00:00Z","modified":"2026-10-29T11:02:26.438602856Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:9413","title":"Moderate: bluez security update","description":"The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.   \n\nSecurity Fix(es):  \n\n  * bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)\n  * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)\n  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596)\n  * bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594)\n  * bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592)\n  * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)\n  * bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580)\n  * bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431)\n  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230)\n  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.\n","status":"published","published":"2024-11-12T00:00:00Z","modified":"2026-10-29T11:31:53.920798667Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ASB-A-294854926","description":"In multiple locations, there is a possible way to inject keystrokes due to improper input validation. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-12-01T00:00:00Z","modified":"2026-11-05T16:32:28.703711716Z","updated_at":"2026-11-05T17:55:15.724291Z"},{"id":"CLSA-2025-1763031616","title":"bluez: Fix of 10 CVEs","description":"- CVE-2023-27349: fix crash while handling unsupported events in avrcp\n- CVE-2023-44431: fix Stack-based buffer overflow and remote code execution\n  vulnerability\n- CVE-2023-45866: restrict HID connections to avoid unauthorized input injection\n- CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone\n  Book Access profile by adding proper validation of user-supplied data length\n  before copying to buffer\n- CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book\n  Access profile to prevent arbitrary code execution by validating user-supplied\n  data length before copying to buffer\n- CVE-2023-51580: validate AVRCP attribute list data to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51589: validate AVRCP media element data to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51592: validate AVRCP media folder data to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51594: validate OBEX protocol parameters to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51596: validate PBAP data length to prevent heap overflow and remote\n  code execution","status":"published","published":"2025-11-13T11:00:20Z","modified":"2026-06-01T00:31:25.253544213Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"DLA-3689-1","title":"bluez - security update","status":"published","published":"2023-12-14T00:00:00Z","modified":"2026-03-09T01:18:22.645866Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5584-1","title":"bluez - security update","status":"published","published":"2023-12-21T00:00:00Z","modified":"2026-03-09T02:10:49.907088Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2023-0353","title":"Updated bluez packages fix a security vulnerability","description":"This update fixes the following security issue.\nBluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral\nrole HID Device to initiate and establish an encrypted connection, and\naccept HID keyboard reports, potentially permitting injection of HID\nmessages when no user interaction has occurred in the Central role to\nauthorize such access (CVE-2023-45866).\n","status":"published","published":"2023-12-20T17:21:01Z","modified":"2026-04-16T04:41:15.74452521Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13507-1","title":"bluez-5.70-2.1 on GA media","description":"These are all security issues fixed in the bluez-5.70-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:16:47.141406Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2024:9413","title":"Moderate: bluez security update","description":"The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (Rocky Enterprise Software Foundation), and pcmcia configuration files. \n\nSecurity Fix(es):\n\n* bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)\n\n* BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)\n\n* bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596)\n\n* bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594)\n\n* bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592)\n\n* bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)\n\n* bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580)\n\n* bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431)\n\n* bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230)\n\n* bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.","status":"published","published":"2025-03-17T20:16:43.608626Z","modified":"2026-02-05T13:30:14.532983Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"SUSE-SU-2025:03269-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections (bsc#1217877).\n","status":"published","published":"2025-09-18T11:09:45Z","modified":"2026-02-04T03:27:18.569825Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03277-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections (bsc#1217877).\n","status":"published","published":"2025-09-19T12:18:50Z","modified":"2026-03-23T04:49:56.739064Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03590-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections (bsc#1217877).\n","status":"published","published":"2025-10-13T12:59:07Z","modified":"2026-03-23T04:48:05.509058Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:20804-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2023-45866: Fixed unauthorized HID device connections allowing\n  keystroke injection and arbitrary commands execution (bsc#1217877)\n","status":"published","published":"2025-10-01T13:47:55Z","modified":"2026-03-23T04:49:04.836778Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2026:20041-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections (bsc#1217877).\n","status":"published","published":"2026-01-08T15:07:04Z","modified":"2026-03-23T04:52:31.025642Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"USN-6540-1","title":"bluez vulnerability","description":"It was discovered that BlueZ did not properly restrict non-bonded devices\nfrom injecting HID events into the input subsystem. This could allow a\nphysically proximate attacker to inject keystrokes and execute arbitrary\ncommands whilst the device is discoverable.\n","status":"published","published":"2023-12-07T04:07:20Z","modified":"2026-06-25T13:32:02.732908271Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}