CVE-2022-0204
- State
- Published
- Severity
- 8.8 High
- Published
- Mar 9, 2022
- Updated
- Apr 15, 2026
- Reserved
- Jan 12, 2022
Description
A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
bluezn/a |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2039807
- https://github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q
- https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0
- GLSA-202209-16vendor-advisory
- [debian-lts-announce] 20221024 [SECURITY] [DLA 3157-1] bluez security updatemailing-list
- https://lists.debian.org/debian-lts-announce/2024/09/msg00022.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.