PT-2023-31857 · Bluez +5 · Bluez +5

Lucas Leong + 1 · Published 2023-12-21 · Updated 2025-07-08 · CVE-2023-51589

Positive Technologies · (AI Summary)

CVSS v3.1

5.7

5.7

Medium

Base vector

AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions:

BlueZ (affected versions not specified)

Description:

This issue allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this issue, as the target must connect to a malicious device. The specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2024:9413

ALSA-2025:4043

CESA-2025_4043

CVE-2023-51589

INFSA-2024_9413

INFSA-2025_4043

MGASA-2025-0115

RHSA-2024:9413

RHSA-2024_9413

RHSA-2025:4043

RHSA-2025_4043

RLSA-2024:9413

ZDI-23-1904

Affected Products

Almalinux

Bluez

Centos

Debian

Red Hat

Rocky Linux

References · 87

• 🔥 https://github.com/Danyw24/blueXploit · Exploit
• https://bdu.fstec.ru/vul/2024-01454 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45866 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44431 · Security Note
• https://osv.dev/vulnerability/ALSA-2025:4043 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27349 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-51594 · Security Note
• https://osv.dev/vulnerability/ALSA-2024:9413 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-51589 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-50230 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51596 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-51596 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-44431 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51580 · Security Note
• https://bdu.fstec.ru/vul/2023-08562 · Security Note