6.5
Moyenne
CVE-2021-3658 bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it…
Description
bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BlueZ | Versions non publiées |
Autres CVE de BlueZ
Les 5 CVE de BlueZ →
CVE-2022-0204
A heap overflow vulnerability was found in bluez in versions prior to 5.63
8.8
Élevée
CVE-2021-0129
Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via…
Non notée
CVE-2020-12352
Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via…
Non notée
CVE-2020-12351
Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via…
Non notée