{"id":"CVE-2023-50229","aliases":["ALSA-2024:9413","AZL-40217","AZL-40267","CLSA-2025-1755113613","CLSA-2025-1763031616","DEBIAN-CVE-2023-50229","DLA-3879-1","EUVD-2023-55051","GHSA-5p3x-h55j-m7f2","OESA-2024-1029","RHSA-2024:9413","RLSA-2024:9413","ROOT-OS-ALPINE-318-CVE-2023-50229","SUSE-SU-2024:0166-1","SUSE-SU-2024:0167-1","SUSE-SU-2024:0182-1","SUSE-SU-2024:0183-1","SUSE-SU-2024:0204-1","UBUNTU-CVE-2023-50229","USN-7222-1"],"status":"published","title":"BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.\n\nThe specific flaw exists within the handling of the Phone Book Access profile. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20936.","severity":{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0229,"percentile":0.83369,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2024-01-12T11:06:28Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"bluez","fixed_in":["5.63-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"bluez","fixed_in":["5.63-6"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"bluez","fixed_in":["5.66-1+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bluez","fixed_in":["5.70-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bluez","fixed_in":["5.70-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"bluez","fixed_in":["5.54-14.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"bluez","fixed_in":["5.54-14.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"bluez","fixed_in":["5.54-19.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"bluez","fixed_in":["5.54-19.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"bluez","fixed_in":["5.54-19.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"bluez","fixed_in":["5.54-19.oe2203sp3"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"bluez","fixed_in":["5.66-r50071","5.66-r50073","5.66-r50072","5.66-r50074","5.66-r50075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"rootio-bluez","fixed_in":["5.66-r50071","5.66-r50073","5.66-r50072","5.66-r50074","5.66-r50075"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"bluez","fixed_in":["5.53-0ubuntu3.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"bluez","fixed_in":["5.64-0ubuntu1.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bluez-obexd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Azure Linux:3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.63-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.63-6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.64-2.el9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.64-2.el9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-hid2hci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.64-2.el9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.64-2.el9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.64-2.el9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-mesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.64-2.el9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-obexd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.64-2.el9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-hid2hci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-mesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bluez-obexd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"Debian:12","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.66-1+deb12u2"}]}],"versions":["5.66-1","5.66-1+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.70-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.70-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-3.1+deb11u2"}]}],"versions":["5.55-3.1","5.55-3.1+deb11u1"],"bundled":9},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-14.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-14.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-19.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-19.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-19.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-19.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-libs-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-mesh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-obexd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-libs-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-mesh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-libs-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-mesh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.72-2.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.66-r50071"},{"fixed":"5.66-r50073"},{"fixed":"5.66-r50072"},{"fixed":"5.66-r50074"},{"fixed":"5.66-r50075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"rootio-bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.66-r50071"},{"fixed":"5.66-r50073"},{"fixed":"5.66-r50072"},{"fixed":"5.66-r50074"},{"fixed":"5.66-r50075"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-150000.5.54.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-150000.5.54.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-150000.5.54.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-150200.13.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-150200.13.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-150200.13.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-150300.3.28.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-150300.3.28.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-150300.3.28.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.55-150300.3.28.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.65-150500.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.65-150500.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.65-150500.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.65-150500.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.65-150500.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.62-150400.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.62-150400.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.62-150400.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.62-150400.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.62-150400.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.62-150400.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.62-150400.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.62-150400.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.62-150400.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.62-150400.4.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.35-0ubuntu2","5.36-0ubuntu1","5.37-0ubuntu5","5.37-0ubuntu5.1","5.37-0ubuntu5.3","5.37-0ubuntu5.3+esm1","5.37-0ubuntu5.3+esm2","5.37-0ubuntu5.3+esm3","5.37-0ubuntu5.3+esm4","5.37-0ubuntu5.3+esm5","5.37-0ubuntu5.3+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.46-0ubuntu3","5.46-0ubuntu4","5.48-0ubuntu3","5.48-0ubuntu3.1","5.48-0ubuntu3.2","5.48-0ubuntu3.3","5.48-0ubuntu3.4","5.48-0ubuntu3.5","5.48-0ubuntu3.6","5.48-0ubuntu3.7","5.48-0ubuntu3.8","5.48-0ubuntu3.9","5.48-0ubuntu3.9+esm1","5.48-0ubuntu3.9+esm2","5.48-0ubuntu3.9+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.53-0ubuntu3.9"}]}],"versions":["5.50-0ubuntu4","5.51-0ubuntu1","5.51-0ubuntu2","5.52-0ubuntu1","5.52-0ubuntu2","5.53-0ubuntu1","5.53-0ubuntu2","5.53-0ubuntu3","5.53-0ubuntu3.1","5.53-0ubuntu3.2","5.53-0ubuntu3.3","5.53-0ubuntu3.4","5.53-0ubuntu3.5","5.53-0ubuntu3.6","5.53-0ubuntu3.7","5.53-0ubuntu3.8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.64-0ubuntu1.4"}]}],"versions":["5.60-0ubuntu2","5.62-0ubuntu1","5.62-0ubuntu2","5.63-0ubuntu1","5.63-0ubuntu2","5.64-0ubuntu1","5.64-0ubuntu1.1","5.64-0ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.53-0ubuntu3.9"}]}],"versions":["5.50-0ubuntu4","5.51-0ubuntu1","5.51-0ubuntu2","5.52-0ubuntu1","5.52-0ubuntu2","5.53-0ubuntu1","5.53-0ubuntu2","5.53-0ubuntu3","5.53-0ubuntu3.1","5.53-0ubuntu3.2","5.53-0ubuntu3.3","5.53-0ubuntu3.4","5.53-0ubuntu3.5","5.53-0ubuntu3.6","5.53-0ubuntu3.7","5.53-0ubuntu3.8"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.64-0ubuntu1.4"}]}],"versions":["5.60-0ubuntu2","5.62-0ubuntu1","5.62-0ubuntu2","5.63-0ubuntu1","5.63-0ubuntu2","5.64-0ubuntu1","5.64-0ubuntu1.1","5.64-0ubuntu1.3"],"bundled":2}],"products":[{"vendor":"bluez","product":"bluez"}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-1811/","tags":["x_research-advisory","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://github.com/bluez/bluez/commit/5ab5352531a9cc7058cce569607f3a6831464443","tags":["vendor-advisory","x_transferred","Patch","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00022.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50229","tags":["web","advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-1811"},{"url":"https://github.com/advisories/GHSA-5p3x-h55j-m7f2"},{"url":"https://access.redhat.com/errata/RHSA-2024:9413","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27349","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44431","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45866","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50229","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50230","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51580","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51589","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51592","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51594","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-51596","tags":["report"]},{"url":"https://bugzilla.redhat.com/2253391","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278787","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278945","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278955","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278962","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278965","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278967","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278969","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278972","tags":["report"]},{"url":"https://bugzilla.redhat.com/2278974","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-9413.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1755113613.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1763031616.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50229.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-50229","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1029","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278974","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9413.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27349","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27349","tags":["advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-386/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44431","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44431","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45866","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50229","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50230","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50230","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51580","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51580","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51589","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51589","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51592","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51592","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51594","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51594","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-51596","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51596","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9413","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240166-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1192760","tags":["report"]},{"url":"https://bugzilla.suse.com/1218300","tags":["report"]},{"url":"https://bugzilla.suse.com/1218301","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50230","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240167-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240182-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240183-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240204-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-50229","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7222-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-50230","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-50229","title":"BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.\n\nThe specific flaw exists within the handling of the Phone Book Access profile. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20936.","status":"published","published":"2024-05-03T02:14:46.646Z","modified":"2025-11-04T16:10:45.761Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:35:34.923818Z"}],"euvd":[{"id":"EUVD-2023-55051","description":"BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.\n\nThe specific flaw exists within the handling of the Phone Book Access profile. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20936.","status":"published","published":"2024-05-03T02:14:46Z","modified":"2025-11-04T16:10:45Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:28.888576Z"}],"ghsa":[{"id":"GHSA-5p3x-h55j-m7f2","title":"BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability....","description":"BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.\n\nThe specific flaw exists within the handling of the Phone Book Access profile. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20936.","status":"published","published":"2024-05-03T03:31:06Z","modified":"2025-11-04T18:31:58Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:04:34.447716Z"}],"nvd":[{"id":"CVE-2023-50229","description":"BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.\n\nThe specific flaw exists within the handling of the Phone Book Access profile. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20936.","status":"published","published":"2024-05-03T03:16:11.68Z","modified":"2026-06-17T06:39:20.69Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:09:12.053868Z"}],"osv":[{"id":"CVE-2023-50229","title":"BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.\n\nThe specific flaw exists within the handling of the Phone Book Access profile. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20936.","status":"published","published":"2024-05-03T02:14:46.646Z","modified":"2026-10-28T10:36:04.738258157Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:34.72355Z"},{"id":"DEBIAN-CVE-2023-50229","description":"BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.  The specific flaw exists within the handling of the Phone Book Access profile. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20936.","status":"published","published":"2024-05-03T03:16:11.68Z","modified":"2026-10-26T18:02:35.450341395Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.586408Z"},{"id":"OESA-2024-1029","title":"bluez security update","description":"This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A.\r\n\r\nSecurity Fix(es):\r\n\r\nVUL-0: CVE-2023-50229: bluez: BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability(CVE-2023-50229)","status":"published","published":"2024-01-12T11:06:28Z","modified":"2026-08-18T01:18:12.295981588Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:9413","title":"Red Hat Security Advisory: bluez security update","status":"published","published":"2024-11-12T18:06:36Z","modified":"2026-08-07T10:16:43Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"ROOT-OS-ALPINE-318-CVE-2023-50229","title":"CVE-2023-50229 in bluez - Patched by Root","description":"Root has patched CVE-2023-50229 in the bluez package for Root:Alpine:3.18. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:30:55Z","modified":"2026-09-29T10:15:41.905941714Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"UBUNTU-CVE-2023-50229","description":"BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device. The specific flaw exists within the handling of the Phone Book Access profile. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20936.","status":"published","published":"2024-05-03T03:16:00Z","modified":"2026-10-09T01:45:18.169512932Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"ALSA-2024:9413","title":"Moderate: bluez security update","description":"The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.   \n\nSecurity Fix(es):  \n\n  * bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)\n  * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)\n  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596)\n  * bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594)\n  * bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592)\n  * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)\n  * bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580)\n  * bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431)\n  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230)\n  * bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.\n","status":"published","published":"2024-11-12T00:00:00Z","modified":"2026-10-29T11:31:53.920798667Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-40217","title":"CVE-2023-50229 affecting package bluez for versions less than 5.63-5","description":"BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.\n\nThe specific flaw exists within the handling of the Phone Book Access profile. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20936.","status":"published","published":"2024-05-03T03:16:11Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:19.751978Z"},{"id":"AZL-40267","title":"CVE-2023-50229 affecting package bluez for versions less than 5.63-6","description":"BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.\n\nThe specific flaw exists within the handling of the Phone Book Access profile. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20936.","status":"published","published":"2024-05-03T03:16:11Z","modified":"2026-04-21T04:28:57.90754Z","updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"CLSA-2025-1755113613","title":"bluez: Fix of 2 CVEs","description":"- CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone\n  Book Access profile by adding proper validation of user-supplied data length\n  before copying to buffer\n- CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book\n  Access profile to prevent arbitrary code execution by validating user-supplied\n  data length before copying to buffer","status":"published","published":"2025-08-13T19:33:37Z","modified":"2026-06-01T00:30:46.470375012Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1763031616","title":"bluez: Fix of 10 CVEs","description":"- CVE-2023-27349: fix crash while handling unsupported events in avrcp\n- CVE-2023-44431: fix Stack-based buffer overflow and remote code execution\n  vulnerability\n- CVE-2023-45866: restrict HID connections to avoid unauthorized input injection\n- CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone\n  Book Access profile by adding proper validation of user-supplied data length\n  before copying to buffer\n- CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book\n  Access profile to prevent arbitrary code execution by validating user-supplied\n  data length before copying to buffer\n- CVE-2023-51580: validate AVRCP attribute list data to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51589: validate AVRCP media element data to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51592: validate AVRCP media folder data to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51594: validate OBEX protocol parameters to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51596: validate PBAP data length to prevent heap overflow and remote\n  code execution","status":"published","published":"2025-11-13T11:00:20Z","modified":"2026-06-01T00:31:25.253544213Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"DLA-3879-1","title":"bluez - security update","status":"published","published":"2024-09-07T00:00:00Z","modified":"2026-03-09T01:18:30.227025Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"RLSA-2024:9413","title":"Moderate: bluez security update","description":"The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (Rocky Enterprise Software Foundation), and pcmcia configuration files. \n\nSecurity Fix(es):\n\n* bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)\n\n* BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)\n\n* bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-51596)\n\n* bluez: OBEX library out-of-bounds read information disclosure vulnerability (CVE-2023-51594)\n\n* bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability (CVE-2023-51592)\n\n* bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)\n\n* bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability (CVE-2023-51580)\n\n* bluez: AVRCP stack-based buffer overflow remote code execution vulnerability (CVE-2023-44431)\n\n* bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50230)\n\n* bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability (CVE-2023-50229)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.","status":"published","published":"2025-03-17T20:16:43.608626Z","modified":"2026-02-05T13:30:14.532983Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"SUSE-SU-2024:0166-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2021-41229: Fix leaking buffers stored in cstates cache\n  (bsc#1192760).\n- CVE-2023-50229: Fixed an out of bounds write in the primary version\n  counter for the Phone Book Access Profile implementation\n  (bsc#1218300).\n- CVE-2023-50230: Fixed an out of bounds write in the secondary\n  version counter for the Phone Book Access Profile implementation\n  (bsc#1218301).\n","status":"published","published":"2024-01-19T13:59:50Z","modified":"2026-02-04T03:27:59.68398Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0167-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2021-41229: Fix leaking buffers stored in cstates cache\n  (bsc#1192760).\n- CVE-2023-50229: Fixed an out of bounds write in the primary version\n  counter for the Phone Book Access Profile implementation\n  (bsc#1218300).\n- CVE-2023-50230: Fixed an out of bounds write in the secondary\n  version counter for the Phone Book Access Profile implementation\n  (bsc#1218301).\n","status":"published","published":"2024-01-19T14:00:07Z","modified":"2026-02-04T04:32:30.111129Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0182-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2023-50229: Fixed an out of bounds write in the primary version\n  counter for the Phone Book Access Profile implementation\n  (bsc#1218300).\n- CVE-2023-50230: Fixed an out of bounds write in the secondary\n  version counter for the Phone Book Access Profile implementation\n  (bsc#1218301).  \n","status":"published","published":"2024-01-23T11:04:03Z","modified":"2026-02-04T04:24:42.418592Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0183-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2023-50229: Fixed an out of bounds write in the primary version\n  counter for the Phone Book Access Profile implementation\n  (bsc#1218300).\n- CVE-2023-50230: Fixed an out of bounds write in the secondary\n  version counter for the Phone Book Access Profile implementation\n  (bsc#1218301).\n","status":"published","published":"2024-01-23T11:33:39Z","modified":"2026-02-04T04:15:52.112798Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0204-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2023-50229: Fixed an out of bounds write in the primary version\n  counter for the Phone Book Access Profile implementation\n  (bsc#1218300).\n- CVE-2023-50230: Fixed an out of bounds write in the secondary\n  version counter for the Phone Book Access Profile implementation\n  (bsc#1218301).\n","status":"published","published":"2024-01-24T12:34:14Z","modified":"2026-02-04T03:19:15.060109Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"USN-7222-1","title":"bluez vulnerabilities","description":"Lucas Leong discovered that BlueZ incorrectly handled the Phone Book Access\nprofile. If a user were tricked into connecting to a malicious Bluetooth\ndevice, a remote attacker could possibly use this issue to execute\narbitrary code.\n","status":"published","published":"2025-01-22T14:41:20Z","modified":"2026-04-27T17:40:29.106943Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}