6.5
Medium
CVE-2021-3658 bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it…
Description
bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BlueZ | Versions not published |
Other CVEs of BlueZ
The 5 CVEs of BlueZ →
CVE-2022-0204
A heap overflow vulnerability was found in bluez in versions prior to 5.63
8.8
High
CVE-2021-0129
Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via…
Not rated
CVE-2020-12352
Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via…
Not rated
CVE-2020-12351
Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via…
Not rated