CVE-2022-0204

Katalog CVE

CVSS 8.8 · High EPSS 1,8%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada bluez, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.

Rincian

Terbit di NVD

10 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 77,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2039807 issue tracking · patch · advisory pihak ketiga
• https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0 patch · advisory pihak ketiga
• https://github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q exploit · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202209-16 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2024/09/msg00022.html