CVE catalog

CVE-2022-39176

bluez affected and fixed versions

[CVE catalog]

BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.

Severity
High · CVSS 8.8CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.75% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixiebluez5.61-1FixedDistribution-reported fixed boundary[CVE-2022-39176]
Debiantrixiebluez5.82-1.1Fixed[CVE-2022-39176]
Debiansidbluez5.61-1FixedDistribution-reported fixed boundary[CVE-2022-39176]
Debiansidbluez5.87-5Fixed[CVE-2022-39176]
Debianforkybluez5.61-1FixedDistribution-reported fixed boundary[CVE-2022-39176]
Debianforkybluez5.87-5Fixed[CVE-2022-39176]
Debianbookworm-securitybluez5.66-1+deb12u1Fixed[CVE-2022-39176]
Debianbookwormbluez5.61-1FixedDistribution-reported fixed boundary[CVE-2022-39176]
Debianbookwormbluez5.66-1+deb12u2Fixed[CVE-2022-39176]

Showing 9 fix observations. All 73 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedbluez5.61-1UnknownSource applicability is not establishedProvider not reported
Debianbookwormbluez5.61-1FixedDistribution-reported fixed boundary[CVE-2022-39176]
Debianbookwormbluez5.66-1+deb12u2Fixed[CVE-2022-39176]
Debianbookworm-securitybluez5.66-1+deb12u1Fixed[CVE-2022-39176]
Debianforkybluez5.61-1FixedDistribution-reported fixed boundary[CVE-2022-39176]
Debianforkybluez5.87-5Fixed[CVE-2022-39176]
Debiansidbluez5.61-1FixedDistribution-reported fixed boundary[CVE-2022-39176]
Debiansidbluez5.87-5Fixed[CVE-2022-39176]
Debiantrixiebluez5.61-1FixedDistribution-reported fixed boundary[CVE-2022-39176]
Debiantrixiebluez5.82-1.1Fixed[CVE-2022-39176]
Suseenterprise storage 6bluez5.48-150000.5.46.1UnknownSource applicability is not established[SUSE-SU-2023:0155-1]
Suseenterprise storage 7bluez5.48-150200.13.22.1UnknownSource applicability is not established[SUSE-SU-2023:0156-1]
Suseenterprise storage 7.1bluez5.55-150300.3.19.1UnknownSource applicability is not established[SUSE-SU-2023:0168-1]
Suselinux enterprise high performance computing 15 sp1-ltssbluez5.48-150000.5.46.1UnknownSource applicability is not established[SUSE-SU-2023:0155-1]
Suselinux enterprise high performance computing 15 sp2-ltssbluez5.48-150200.13.22.1UnknownSource applicability is not established[SUSE-SU-2023:0156-1]
Suselinux enterprise high performance computing 15 sp3-esposbluez5.55-150300.3.19.1UnknownSource applicability is not established[SUSE-SU-2023:0168-1]
Suselinux enterprise high performance computing 15 sp3-ltssbluez5.55-150300.3.19.1UnknownSource applicability is not established[SUSE-SU-2023:0168-1]
Suselinux enterprise real time 15 sp3bluez5.55-150300.3.19.1UnknownSource applicability is not established[SUSE-SU-2023:0168-1]
Suselinux enterprise server 12 sp2-bclbluez5.13-5.36.1UnknownSource applicability is not established[SUSE-SU-2023:0166-1]
Suselinux enterprise server 12 sp4-ltssbluez5.13-5.36.1UnknownSource applicability is not established[SUSE-SU-2023:0166-1]
Suselinux enterprise server 12 sp5bluez5.13-5.36.1UnknownSource applicability is not established[SUSE-SU-2023:0166-1]
Suselinux enterprise server 15 sp1-ltssbluez5.48-150000.5.46.1UnknownSource applicability is not established[SUSE-SU-2023:0155-1]
Suselinux enterprise server 15 sp2-ltssbluez5.48-150200.13.22.1UnknownSource applicability is not established[SUSE-SU-2023:0156-1]
Suselinux enterprise server 15 sp3-ltssbluez5.55-150300.3.19.1UnknownSource applicability is not established[SUSE-SU-2023:0168-1]
Suselinux enterprise server for sap applications 12 sp4bluez5.13-5.36.1UnknownSource applicability is not established[SUSE-SU-2023:0166-1]
Suselinux enterprise server for sap applications 12 sp5bluez5.13-5.36.1UnknownSource applicability is not established[SUSE-SU-2023:0166-1]
Suselinux enterprise server for sap applications 15 sp1bluez5.48-150000.5.46.1UnknownSource applicability is not established[SUSE-SU-2023:0155-1]
Suselinux enterprise server for sap applications 15 sp2bluez5.48-150200.13.22.1UnknownSource applicability is not established[SUSE-SU-2023:0156-1]
Suselinux enterprise server for sap applications 15 sp3bluez5.55-150300.3.19.1UnknownSource applicability is not established[SUSE-SU-2023:0168-1]
Suselinux enterprise software development kit 12 sp5bluez5.13-5.36.1UnknownSource applicability is not established[SUSE-SU-2023:0166-1]
Suselinux enterprise workstation extension 12 sp5bluez5.13-5.36.1UnknownSource applicability is not established[SUSE-SU-2023:0166-1]
Susemanager proxy 4.2bluez5.55-150300.3.19.1UnknownSource applicability is not established[SUSE-SU-2023:0168-1]
Susemanager retail branch server 4.2bluez5.55-150300.3.19.1UnknownSource applicability is not established[SUSE-SU-2023:0168-1]
Susemanager server 4.2bluez5.55-150300.3.19.1UnknownSource applicability is not established[SUSE-SU-2023:0168-1]
Suseopenstack cloud 9bluez5.13-5.36.1UnknownSource applicability is not established[SUSE-SU-2023:0166-1]
Suseopenstack cloud crowbar 9bluez5.13-5.36.1UnknownSource applicability is not established[SUSE-SU-2023:0166-1]
Ubuntu18.04bluez5.46-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu18.04bluez5.46-0ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu18.04bluez5.48-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu18.04bluez5.48-0ubuntu3.1UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu18.04bluez5.48-0ubuntu3.2UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu18.04bluez5.48-0ubuntu3.3UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu18.04bluez5.48-0ubuntu3.4UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu18.04bluez5.48-0ubuntu3.5UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu18.04bluez5.48-0ubuntu3.6UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu18.04bluez5.48-0ubuntu3.7UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu18.04bluez5.48-0ubuntu3.8UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu18.04bluez5.48-0ubuntu3.9UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu20.04bluez5.50-0ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu20.04bluez5.51-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu20.04bluez5.51-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu20.04bluez5.52-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu20.04bluez5.52-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu20.04bluez5.53-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu20.04bluez5.53-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu20.04bluez5.53-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu20.04bluez5.53-0ubuntu3.1UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu20.04bluez5.53-0ubuntu3.2UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu20.04bluez5.53-0ubuntu3.3UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu20.04bluez5.53-0ubuntu3.4UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu20.04bluez5.53-0ubuntu3.5UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntu20.04bluez5.53-0ubuntu3.6UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntuprobluez5.35-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntuprobluez5.36-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntuprobluez5.37-0ubuntu5UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntuprobluez5.37-0ubuntu5.1UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntuprobluez5.37-0ubuntu5.3UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntuprobluez5.37-0ubuntu5.3+esm1UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntuprobluez5.37-0ubuntu5.3+esm2UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntuprobluez5.37-0ubuntu5.3+esm3UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntuprobluez5.37-0ubuntu5.3+esm4UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntuprobluez5.37-0ubuntu5.3+esm5UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Ubuntuprobluez5.37-0ubuntu5.3+esm6UnknownSource applicability is not established[UBUNTU-CVE-2022-39176]
Original provider fields
{
  "package_releases": [
    {
      "name": "bluez",
      "status": "fixed",
      "release": "sid",
      "version": "5.87-5"
    },
    {
      "name": "bluez",
      "status": "fixed",
      "release": "forky",
      "version": "5.87-5"
    },
    {
      "name": "bluez",
      "status": "fixed",
      "release": "trixie",
      "version": "5.82-1.1"
    },
    {
      "name": "bluez",
      "status": "fixed",
      "release": "bookworm",
      "version": "5.66-1+deb12u2"
    },
    {
      "name": "bluez",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "5.66-1+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "bluez",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "5.61-1"
    },
    {
      "bug": null,
      "name": "bluez",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "5.61-1"
    },
    {
      "bug": null,
      "name": "bluez",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "5.61-1"
    },
    {
      "bug": null,
      "name": "bluez",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "5.61-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "bluez",
      "fixed_version": "5.61-1",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "5.35-0ubuntu2",
        "5.36-0ubuntu1",
        "5.37-0ubuntu5",
        "5.37-0ubuntu5.1",
        "5.37-0ubuntu5.3",
        "5.37-0ubuntu5.3+esm1",
        "5.37-0ubuntu5.3+esm2",
        "5.37-0ubuntu5.3+esm3",
        "5.37-0ubuntu5.3+esm4",
        "5.37-0ubuntu5.3+esm5",
        "5.37-0ubuntu5.3+esm6"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-39176",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-39176",
      "provider_updated_at": "2026-10-09T01:45:17.191337483Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.48-0ubuntu3.9"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "5.46-0ubuntu3",
        "5.46-0ubuntu4",
        "5.48-0ubuntu3",
        "5.48-0ubuntu3.1",
        "5.48-0ubuntu3.2",
        "5.48-0ubuntu3.3",
        "5.48-0ubuntu3.4",
        "5.48-0ubuntu3.5",
        "5.48-0ubuntu3.6",
        "5.48-0ubuntu3.7",
        "5.48-0ubuntu3.8"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-39176",
      "fixed_version": "5.48-0ubuntu3.9",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-39176",
      "provider_updated_at": "2026-10-09T01:45:17.191337483Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.53-0ubuntu3.6"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "5.50-0ubuntu4",
        "5.51-0ubuntu1",
        "5.51-0ubuntu2",
        "5.52-0ubuntu1",
        "5.52-0ubuntu2",
        "5.53-0ubuntu1",
        "5.53-0ubuntu2",
        "5.53-0ubuntu3",
        "5.53-0ubuntu3.1",
        "5.53-0ubuntu3.2",
        "5.53-0ubuntu3.3",
        "5.53-0ubuntu3.4",
        "5.53-0ubuntu3.5"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-39176",
      "fixed_version": "5.53-0ubuntu3.6",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-39176",
      "provider_updated_at": "2026-10-09T01:45:17.191337483Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.55-150300.3.19.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp3-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0168-1",
      "fixed_version": "5.55-150300.3.19.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0168-1",
      "provider_updated_at": "2026-02-04T03:56:44.501846Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.55-150300.3.19.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0168-1",
      "fixed_version": "5.55-150300.3.19.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0168-1",
      "provider_updated_at": "2026-02-04T03:56:44.501846Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.55-150300.3.19.1"
            }
          ]
        }
      ],
      "release": "linux enterprise real time 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0168-1",
      "fixed_version": "5.55-150300.3.19.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0168-1",
      "provider_updated_at": "2026-02-04T03:56:44.501846Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.55-150300.3.19.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0168-1",
      "fixed_version": "5.55-150300.3.19.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0168-1",
      "provider_updated_at": "2026-02-04T03:56:44.501846Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.55-150300.3.19.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0168-1",
      "fixed_version": "5.55-150300.3.19.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0168-1",
      "provider_updated_at": "2026-02-04T03:56:44.501846Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.55-150300.3.19.1"
            }
          ]
        }
      ],
      "release": "manager proxy 4.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0168-1",
      "fixed_version": "5.55-150300.3.19.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0168-1",
      "provider_updated_at": "2026-02-04T03:56:44.501846Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.55-150300.3.19.1"
            }
          ]
        }
      ],
      "release": "manager retail branch server 4.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0168-1",
      "fixed_version": "5.55-150300.3.19.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0168-1",
      "provider_updated_at": "2026-02-04T03:56:44.501846Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.55-150300.3.19.1"
            }
          ]
        }
      ],
      "release": "manager server 4.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0168-1",
      "fixed_version": "5.55-150300.3.19.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0168-1",
      "provider_updated_at": "2026-02-04T03:56:44.501846Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.55-150300.3.19.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 7.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0168-1",
      "fixed_version": "5.55-150300.3.19.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0168-1",
      "provider_updated_at": "2026-02-04T03:56:44.501846Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.48-150000.5.46.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0155-1",
      "fixed_version": "5.48-150000.5.46.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0155-1",
      "provider_updated_at": "2026-02-04T02:32:31.818426Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.48-150000.5.46.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0155-1",
      "fixed_version": "5.48-150000.5.46.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0155-1",
      "provider_updated_at": "2026-02-04T02:32:31.818426Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.48-150000.5.46.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0155-1",
      "fixed_version": "5.48-150000.5.46.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0155-1",
      "provider_updated_at": "2026-02-04T02:32:31.818426Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.48-150000.5.46.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0155-1",
      "fixed_version": "5.48-150000.5.46.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0155-1",
      "provider_updated_at": "2026-02-04T02:32:31.818426Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.48-150200.13.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0156-1",
      "fixed_version": "5.48-150200.13.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0156-1",
      "provider_updated_at": "2026-02-04T02:31:14.861145Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.48-150200.13.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0156-1",
      "fixed_version": "5.48-150200.13.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0156-1",
      "provider_updated_at": "2026-02-04T02:31:14.861145Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.48-150200.13.22.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0156-1",
      "fixed_version": "5.48-150200.13.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0156-1",
      "provider_updated_at": "2026-02-04T02:31:14.861145Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.48-150200.13.22.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 7",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0156-1",
      "fixed_version": "5.48-150200.13.22.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0156-1",
      "provider_updated_at": "2026-02-04T02:31:14.861145Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.13-5.36.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0166-1",
      "fixed_version": "5.13-5.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0166-1",
      "provider_updated_at": "2025-05-02T04:33:31.660171Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.13-5.36.1"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0166-1",
      "fixed_version": "5.13-5.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0166-1",
      "provider_updated_at": "2025-05-02T04:33:31.660171Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.13-5.36.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0166-1",
      "fixed_version": "5.13-5.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0166-1",
      "provider_updated_at": "2025-05-02T04:33:31.660171Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.13-5.36.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0166-1",
      "fixed_version": "5.13-5.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0166-1",
      "provider_updated_at": "2025-05-02T04:33:31.660171Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.13-5.36.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp2-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0166-1",
      "fixed_version": "5.13-5.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0166-1",
      "provider_updated_at": "2025-05-02T04:33:31.660171Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.13-5.36.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0166-1",
      "fixed_version": "5.13-5.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0166-1",
      "provider_updated_at": "2025-05-02T04:33:31.660171Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.13-5.36.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0166-1",
      "fixed_version": "5.13-5.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0166-1",
      "provider_updated_at": "2025-05-02T04:33:31.660171Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.13-5.36.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0166-1",
      "fixed_version": "5.13-5.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0166-1",
      "provider_updated_at": "2025-05-02T04:33:31.660171Z",
      "applicability_unknown": true
    },
    {
      "name": "bluez",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.13-5.36.1"
            }
          ]
        }
      ],
      "release": "linux enterprise workstation extension 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0166-1",
      "fixed_version": "5.13-5.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0166-1",
      "provider_updated_at": "2025-05-02T04:33:31.660171Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [bluetooth]Unknown

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

  • [bluez]Unknown
    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

  • [bluez-cups]Unknown

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

  • [bluez-hcidump]Unknown

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

  • [bluez-meshd]Unknown

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

  • [bluez-obexd]Unknown

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

  • [bluez-source]Unknown

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

  • [bluez-test-scripts]Unknown

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

  • [bluez-test-tools]Unknown

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

  • [libbluetooth3]Unknown

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

  • [libbluetooth-dev]Unknown

    Source package: [bluez]

    Details (4)

    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.61-1

      dsa · bluez · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]