https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:59:45 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:11154 <p><strong>Affected:</strong> AlmaLinux:8: bluez, AlmaLinux:8: bluez-cups, AlmaLinux:8: bluez-hid2hci, AlmaLinux:8: bluez-libs, AlmaLinux:8: bluez-libs-devel, AlmaLinux:8: bluez-obexd</p> <p>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.</p> <p>Security Fix(es):</p> <p>* bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: bluez, AlmaLinux:8: bluez-cups, AlmaLinux:8: bluez-hid2hci, AlmaLinux:8: bluez-libs, AlmaLinux:8: bluez-libs-devel, AlmaLinux:8: bluez-obexd</p> <p>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.</p> <p>Security Fix(es):</p> <p>* bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:11154 https://cve.radiocsirt.org/vuln/bdu:2023-08562 bdu:2023-08562 https://cve.radiocsirt.org/vuln/bdu:2023-08562 https://cve.radiocsirt.org/vuln/bell-cve-2023-45866 <p><strong>Affected:</strong> Alpaquita:23: bluez</p> <p><strong>Affected:</strong> Alpaquita:23: bluez</p> https://cve.radiocsirt.org/vuln/bell-cve-2023-45866 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0995 certfr-2023-avi-0995 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0995 https://cve.radiocsirt.org/vuln/euvd-2026-259884 EUVD-2026-259884 https://cve.radiocsirt.org/vuln/euvd-2026-259884 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45866 <p>Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.</p> <p>Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-45866 https://cve.radiocsirt.org/vuln/ghsa-qjcj-xg77-6c32 <p>Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.</p> <p>Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.</p> https://cve.radiocsirt.org/vuln/ghsa-qjcj-xg77-6c32 https://cve.radiocsirt.org/vuln/gsd-2023-45866 gsd-2023-45866 https://cve.radiocsirt.org/vuln/gsd-2023-45866 https://cve.radiocsirt.org/vuln/msrc_cve-2023-45866 msrc_CVE-2023-45866 https://cve.radiocsirt.org/vuln/msrc_cve-2023-45866 https://cve.radiocsirt.org/vuln/oesa-2023-1948 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: bluez, openEuler:20.03-LTS-SP3: bluez, openEuler:20.03-LTS-SP4: bluez, openEuler:22.03-LTS: bluez, openEuler:22.03-LTS-SP1: bluez, openEuler:22.03-LTS-SP2: bluez</p> <p>This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fix(es): Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.(CVE-2023-45866)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: bluez, openEuler:20.03-LTS-SP3: bluez, openEuler:20.03-LTS-SP4: bluez, openEuler:22.03-LTS: bluez, openEuler:22.03-LTS-SP1: bluez, openEuler:22.03-LTS-SP2: bluez</p> <p>This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fix(es): Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.(CVE-2023-45866)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1948 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13507-1 <p>bluez-5.70-2.1 on GA media</p> <p>bluez-5.70-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13507-1 https://cve.radiocsirt.org/vuln/suse-su-2025:03269-1 <p>Security update for bluez</p> <p>Security update for bluez</p> https://cve.radiocsirt.org/vuln/suse-su-2025:03269-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-45866 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: bluez, Ubuntu:Pro:18.04:LTS: bluez, Ubuntu:20.04:LTS: bluez, Ubuntu:22.04:LTS: bluez, Ubuntu:24.04:LTS: bluez</p> <p>Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: bluez, Ubuntu:Pro:18.04:LTS: bluez, Ubuntu:20.04:LTS: bluez, Ubuntu:22.04:LTS: bluez, Ubuntu:24.04:LTS: bluez</p> <p>Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-45866 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3057 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3057