AZL-7183
Dashboard / Vulnerabilities / AZL-7183
Summary: CVE-2021-3588 affecting package bluez for versions less than 5.63-1
Details: The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading.
References: https://nvd.nist.gov/vuln/detail/CVE-2021-3588
Affected packages
Package
Name: bluez
Purl: pkg:rpm/azure-linux/bluez
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -5.63-1
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
