Known vulnerabilities in bluez (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:bluez_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 17
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting bluez (Ubuntu package) bluez (Ubuntu package) is affected by 17 known vulnerabilities: 8 medium, 9 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84605 - Heap-based Buffer Overflow
CVE-2023-50229
CWE-122 Medium
No
No
5.53-0ubuntu3.9, 5.64-0ubuntu1.4 20.12.2023 SB2023122020
SB2024011936
SB2024011937
and 12 more
#VU84603 - Heap-based Buffer Overflow
CVE-2023-50230
CWE-122 Medium
No
No
5.53-0ubuntu3.9, 5.64-0ubuntu1.4 20.12.2023 SB2023122020
SB2024011936
SB2024011937
and 13 more
#VU83831 - Improper input validation
CVE-2023-45866
CWE-20 Medium
Available
No
Ubuntu Pro, 5.53-0ubuntu3.7, 5.64-0ubuntu1.1, 5.66-0ubuntu1.1, 5.68-0ubuntu1.1 04.12.2023 SB2023120445
SB2023120701
SB2023120721
and 19 more
#VU83408 - Incorrect Authorization
CVE-2021-3658
CWE-863 Low
No
No
5.48-0ubuntu3.6, 5.53-0ubuntu3.4, 5.56-0ubuntu4.3, 5.60-0ubuntu2.1 22.11.2023 SB2022030234
SB2021093037
SB2022102158
and 7 more
#VU83407 - Use After Free
CVE-2021-43400
CWE-416 Medium
No
No
5.48-0ubuntu3.6, 5.53-0ubuntu3.4, 5.56-0ubuntu4.3, 5.60-0ubuntu2.1 22.11.2023 SB2021110523
SB2022021440
SB2022111142
and 6 more
#VU79524 - Missing release of memory after effective lifetime
CVE-2021-41229
CWE-401 Medium
No
No
5.48-0ubuntu3.6, 5.53-0ubuntu3.4, 5.56-0ubuntu4.3, 5.60-0ubuntu2.1 15.08.2023 SB2021111303
SB2023081533
SB2023081534
and 9 more
#VU75105 - Memory corruption
CVE-2023-27349
CWE-119 Low
No
No
Ubuntu Pro, 5.53-0ubuntu3.8, 5.64-0ubuntu1.3 13.04.2023 SB2023041354
SB2023061925
SB2023061939
and 16 more
#VU71644 - NULL Pointer Dereference
CVE-2022-3563
CWE-476 Low
No
No
Ubuntu Pro, 5.53-0ubuntu3.8, 5.64-0ubuntu1.3 30.01.2023 SB2023013036
SB2023013038
SB2024060587
and 1 more
#VU68830 - Out-of-bounds read
CVE-2019-8921
CWE-125 Low
No
No
Ubuntu Pro 30.10.2022 SB2021112924
SB2022103008
SB2022102158
and 2 more
#VU67751 - Out-of-bounds read
CVE-2021-3588
CWE-125 Low
No
No
5.48-0ubuntu3.5, 5.53-0ubuntu3.2, 5.55-0ubuntu1.2, 5.56-0ubuntu4.1 29.09.2022 SB2021061036
SB2022092954
SB2021072317
and 2 more
#VU66694 - Heap-based Buffer Overflow
CVE-2019-8922
CWE-122 Medium
No
No
Ubuntu Pro, 5.48-0ubuntu3.7 22.08.2022 SB2021112924
SB2022082246
SB2022082607
and 5 more
#VU66639 - Heap-based Buffer Overflow
CVE-2022-0204
CWE-122 Low
No
No
5.48-0ubuntu3.8, 5.53-0ubuntu3.5, 5.53-0ubuntu3.6, 5.60-0ubuntu2.2 18.08.2022 SB2022081856
SB2022081857
SB2022082428
and 8 more
#VU64523 - Improper input validation
CVE-2022-39177
CWE-20 Medium
No
No
5.48-0ubuntu3.9, 5.53-0ubuntu3.6 20.06.2022 SB2022062042
SB2022062043
SB2023012655
and 6 more
#VU53579 - Security Features
CVE-2020-26558
CWE-254 Low
No
No
5.48-0ubuntu3.5, 5.53-0ubuntu3.2, 5.55-0ubuntu1.2, 5.56-0ubuntu4.1, 5.370ubuntu5.3+esm1 26.05.2021 SB2021052614
SB2021060801
SB2021061709
and 29 more
#VU48203 - Double Free
CVE-2020-27153
CWE-415 Medium
No
No
5.48-0ubuntu3.5, 5.53-0ubuntu3.2, 5.55-0ubuntu1.2, 5.56-0ubuntu4.1, 5.370ubuntu5.3+esm1 15.10.2020 SB2020110931
SB2020110932
SB2020110933
and 7 more
#VU26047 - Permissions, Privileges, and Access Controls
CVE-2020-0556
CWE-264 Low
No
No
5.37-0ubuntu5.3, 5.48-0ubuntu3.4, 5.50-0ubuntu5.1 12.03.2020 SB2020031230
SB2020031908
SB2020032514
and 11 more
#VU23108 - Improper Control of Generation of Code ('Code Injection')
CVE-2016-7837
CWE-94 Low
No
No
5.37-0ubuntu5.3, 5.48-0ubuntu3.4, 5.50-0ubuntu5.1 02.12.2019 SB2017060909
SB2020033101