ISOMAN

CVE

CVE-2022-39176

BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.

Severity
HIGH
CVSS
8.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. https://bugs.launchpad.net/ubuntu/+source/bluez/+bug/1977968
  2. https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html
  3. https://security.netapp.com/advisory/ntap-20221020-0002/
  4. https://ubuntu.com/security/notices/USN-5481-1
  5. https://bugs.launchpad.net/ubuntu/+source/bluez/+bug/1977968
  6. https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html
  7. https://lists.debian.org/debian-lts-announce/2024/09/msg00022.html
  8. https://security.netapp.com/advisory/ntap-20221020-0002/
  9. https://ubuntu.com/security/notices/USN-5481-1