{"id":"CLSA-2025-1763031616","summary":"bluez: Fix of 10 CVEs","details":"- CVE-2023-27349: fix crash while handling unsupported events in avrcp\n- CVE-2023-44431: fix Stack-based buffer overflow and remote code execution\n  vulnerability\n- CVE-2023-45866: restrict HID connections to avoid unauthorized input injection\n- CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone\n  Book Access profile by adding proper validation of user-supplied data length\n  before copying to buffer\n- CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book\n  Access profile to prevent arbitrary code execution by validating user-supplied\n  data length before copying to buffer\n- CVE-2023-51580: validate AVRCP attribute list data to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51589: validate AVRCP media element data to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51592: validate AVRCP media folder data to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51594: validate OBEX protocol parameters to prevent out-of-bounds\n  reads and information disclosure\n- CVE-2023-51596: validate PBAP data length to prevent heap overflow and remote\n  code execution","modified":"2026-05-27T11:16:24.021173184Z","published":"2025-11-13T11:00:20Z","upstream":["CVE-2023-27349","CVE-2023-44431","CVE-2023-45866","CVE-2023-50229","CVE-2023-50230","CVE-2023-51580","CVE-2023-51589","CVE-2023-51592","CVE-2023-51594","CVE-2023-51596"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1763031616.html"}],"affected":[{"package":{"name":"bluez","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bluez?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1763031616.json"}},{"package":{"name":"bluez-cups","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bluez-cups?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1763031616.json"}},{"package":{"name":"bluez-hid2hci","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bluez-hid2hci?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1763031616.json"}},{"package":{"name":"bluez-libs","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bluez-libs?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1763031616.json"}},{"package":{"name":"bluez-libs-devel","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bluez-libs-devel?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1763031616.json"}},{"package":{"name":"bluez-mesh","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bluez-mesh?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1763031616.json"}},{"package":{"name":"bluez-obexd","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/bluez-obexd?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.72-4.el9.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1763031616.json"}}],"schema_version":"1.7.5"}