vulnerability

Amazon Linux AMI 2: CVE-2022-39176: Security patch for bluez (ALAS-2022-1881)

Severity
8
CVSS
(AV:A/AC:L/Au:N/C:C/I:C/A:C)
Published
Sep 2, 2022
Added
Dec 7, 2022
Modified
Jan 28, 2025

Description

BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.

Solutions

amazon-linux-ami-2-upgrade-bluezamazon-linux-ami-2-upgrade-bluez-cupsamazon-linux-ami-2-upgrade-bluez-debuginfoamazon-linux-ami-2-upgrade-bluez-hid2hciamazon-linux-ami-2-upgrade-bluez-libsamazon-linux-ami-2-upgrade-bluez-libs-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.