6.3 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
8.1 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
36.3%
BlueZ is the canonical bluetooth tools and system daemons package for Linux.
Multiple vulnerabilities have been discovered in BlueZ. Please review the CVE identifiers referenced below for details.
An attacker may inject unauthenticated keystrokes via Bluetooth, leading to privilege escalation or denial of service.
There is no known workaround at this time.
All BlueZ users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-wireless/bluez-5.70-r1"
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Gentoo | any | all | net-wireless/bluez | < 5.70-r1 | UNKNOWN |
6.3 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
8.1 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
36.3%