CVE-2022-3563
published 2022-10-17CVE-2022-3563: A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file…
PriorityP421medium5.7CVSS 3.1
AVAACLPRLUINSUCNINAH
EPSS
0.41%
33.4th percentile
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| bluez | bluez | < 5.65 | 5.65 |
| bluez | bluez | >= 0 < 5.65-1 | 5.65-1 |
| bluez | bluez | >= 0 < 5.65-1 | 5.65-1 |
| bluez | bluez | >= 0 < 5.65-1 | 5.65-1 |
| bluez | bluez | >= 0 < 5.53-0ubuntu3.8 | 5.53-0ubuntu3.8 |
| bluez | bluez | >= 0 < 5.64-0ubuntu1.3 | 5.64-0ubuntu1.3 |
| bluez | bluez | >= 0 < 5.37-0ubuntu5.3+esm4 | 5.37-0ubuntu5.3+esm4 |
| bluez | bluez | >= 0 < 5.48-0ubuntu3.9+esm2 | 5.48-0ubuntu3.9+esm2 |
| debian | bluez | < bluez 5.65-1 (bookworm) | bluez 5.65-1 (bookworm) |
| linux | kernel | — | — |
| msrc | azl3_bluez_5.63-4_on_azure_linux_3.0 | — | — |
| msrc | azl3_bluez_5.63-6_on_azure_linux_3.0 | — | — |
| msrc | azure_linux_3.0_arm | — | — |
| msrc | azure_linux_3.0_x64 | — | — |
| msrc | cbl_mariner_2.0_arm | — | — |
| msrc | cbl_mariner_2.0_x64 | — | — |
| openstack | keystone | >= 0 < 2:21.0.1-0ubuntu2.1 | 2:21.0.1-0ubuntu2.1 |
CVSS provenance
nvdv3.15.7MEDIUMCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv7.4HIGH
vendor_msrc5.7MEDIUM
vendor_debian3.5LOW
vendor_redhat3.5LOW
vendor_ubuntu3.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
BlueZ vulnerabilities
vendor_ubuntu·2024-06-05·CVSS 3.5
CVE-2023-27349 [LOW] BlueZ vulnerabilities
Title: BlueZ vulnerabilities
Summary: Several security issues were fixed in BlueZ.
It was discovered that BlueZ could be made to dereference invalid memory.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 22.04 LTS. (CVE-2022-3563)
It was discovered that BlueZ could be made to write out of bounds. If a
user were tricked into connecting to a malicious device, an attacker could
possibly use this issue to cause a denial of service or execute arbitrary
code. (CVE-2023-27349)
Instructions: In general, a standard system update will make all the necessary changes.
Microsoft
Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference
vendor_msrc·2022-10-11·CVSS 5.7
CVE-2022-3563 [LOW] CWE-404 Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference
Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
VulDB: VulDB
Customer Action Required: Yes
Remediation: CBL-Mariner
Red Hat
bluez: NULL pointer dereference in read_50_controller_cap_complete() in tools/mgmt-tester.c
vendor_redhat·2022-06-23·CVSS 3.5
CVE-2022-3563 [LOW] CWE-476 bluez: NULL pointer dereference in read_50_controller_cap_complete() in tools/mgmt-tester.c
bluez: NULL pointer dereference in read_50_controller_cap_complete() in tools/mgmt-tester.c
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.
A vulnerability has been found in BlueZ. This issue affects the read_50_controller_cap_complete function of the tools/mgmt-tester.c file in the BlueZ component. A manipulation of the cap_len argument leads to null pointer dereference.
Package: bluez (Red Hat Enterprise Linux 6) - Out of support scope
Package: bluez (Red Hat
Debian
CVE-2022-3563: bluez - A vulnerability classified as problematic has been found in Linux Kernel. Affect...
vendor_debian·2022·CVSS 3.5
CVE-2022-3563 [LOW] CVE-2022-3563: bluez - A vulnerability classified as problematic has been found in Linux Kernel. Affect...
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.
Scope: local
bookworm: resolved (fixed in 5.65-1)
bullseye: resolved
forky: resolved (fixed in 5.65-1)
sid: resolved (fixed in 5.65-1)
trixie: resolved (fixed in 5.65-1)
OSV
keystone vulnerabilities
osv·2025-12-11·CVSS 7.4
CVE-2025-65073 keystone vulnerabilities
keystone vulnerabilities
Kay discovered that OpenStack Keystone incorrectly handled the ec2tokens
and s3tokens APIs. A remote attacker could possibly use this issue to
obtain unauthorized access and escalate privileges. (CVE-2025-65073)
It was discovered that OpenStack Keystone only validated the first 72
bytes of an application secret. An attacker could possibly use this issue
to bypass password complexity. (CVE-2021-3563)
It was discovered that OpenStack Keystone had a time lag before a token
should be revoked by the security policy. A remote administrator could use
this issue to maintain access for longer than expected. (CVE-2022-2447)
OSV
bluez vulnerabilities
osv·2024-06-05·CVSS 5.7
CVE-2022-3563 [MEDIUM] bluez vulnerabilities
bluez vulnerabilities
It was discovered that BlueZ could be made to dereference invalid memory.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 22.04 LTS. (CVE-2022-3563)
It was discovered that BlueZ could be made to write out of bounds. If a
user were tricked into connecting to a malicious device, an attacker could
possibly use this issue to cause a denial of service or execute arbitrary
code. (CVE-2023-27349)
GHSA
GHSA-h7mh-ffww-7v4w: A vulnerability classified as problematic has been found in Linux Kernel
ghsa_unreviewed·2022-10-18
CVE-2022-3563 [MEDIUM] CWE-404 GHSA-h7mh-ffww-7v4w: A vulnerability classified as problematic has been found in Linux Kernel
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.
OSV
CVE-2022-3563: A vulnerability classified as problematic has been found in Linux Kernel
osv·2022-10-17·CVSS 5.7
CVE-2022-3563 [MEDIUM] CVE-2022-3563: A vulnerability classified as problematic has been found in Linux Kernel
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-17
Published