bluez (SUSE:Linux Enterprise Module for Basesystem 15 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Basesystem 15 SP4 package bluez, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2022-0204 — CVSS 8.8 (high): A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially…
• CVE-2023-27349 — CVSS 8.0 (high): BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows…
• CVE-2021-41229 — CVSS 4.3 (medium): BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory…
• CVE-2022-3563 — CVSS 3.5 (low): A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the…