CVE-2022-0204

CVSS 8.8 HIGHEPSS 1.8%CWE-119

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.8EPSS 1.8%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

09 Mar 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

n/a · bluez

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://bugzilla.redhat.com/show_bug.cgi?id=2039807 https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0 https://github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html https://lists.debian.org/debian-lts-announce/2024/09/msg00022.html https://security.gentoo.org/glsa/202209-16