USN-6809-1: BlueZ vulnerabilities

Packages

bluez - Bluetooth tools and daemons

Details

It was discovered that BlueZ could be made to dereference invalid memory.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 22.04 LTS. (CVE-2022-3563)

It was discovered that BlueZ could be made to write out of bounds. If a
user were tricked into connecting to a malicious device, an attacker could
possibly use this issue to cause a denial of service or execute arbitrary
code. (CVE-2023-27349)

It was discovered that BlueZ could be made to dereference invalid memory.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 22.04 LTS. (CVE-2022-3563)

It was discovered that BlueZ could be made to write out of bounds. If a
user were tricked into connecting to a malicious device, an attacker could
possibly use this issue to cause a denial of service or execute arbitrary
code. (CVE-2023-27349)

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
22.04 jammy	bluez – 5.64-0ubuntu1.3
	bluez-tests – 5.64-0ubuntu1.3
	libbluetooth3 – 5.64-0ubuntu1.3
20.04 focal	bluez – 5.53-0ubuntu3.8
20.04 focal	libbluetooth3 – 5.53-0ubuntu3.8
18.04 bionic	bluez – 5.48-0ubuntu3.9+esm2
18.04 bionic	libbluetooth3 – 5.48-0ubuntu3.9+esm2
16.04 xenial	bluez – 5.37-0ubuntu5.3+esm4
16.04 xenial	libbluetooth3 – 5.37-0ubuntu5.3+esm4

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

Packages

Details

Update instructions

Reduce your security exposure

References