Skip to content
Fencer Vulns
high 8.8

CVE-2022-0204 json

A heap overflow vulnerability was found in bluez in versions prior to 5.63.

published 2022-03-09 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-15406

cvss
8.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.8%
EPSS 1.8% chance of exploitation in 30 days, percentile 78%
public exploits
0
none known

Summary

A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.

Patch / fix

  • bluez bluez 5.63
  • bluez Debian 14, Debian 13, Debian 12 5.64-1

debian advisories DEBIAN-CVE-2022-0204

  • bluez Ubuntu 18.04 LTS 5.48-0ubuntu3.8
  • bluez Ubuntu 20.04 LTS 5.53-0ubuntu3.5
  • bluez Ubuntu 22.04 LTS 5.63-0ubuntu1
  • bluez Ubuntu Pro 16.04 LTS 5.37-0ubuntu5.3+esm2

ubuntu advisories UBUNTU-CVE-2022-0204

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • bluez SLE Workstation Extension 15 SP4, SLE Module for Desktop Applications 15 SP4, SLE Module for Basesystem 15 SP4 +1 more 5.62-150400.4.5.1
  • bluez SLES for SAP 15 SP2, SLES 15 SP2-LTSS, SLES 15 SP2-BCL +6 more 5.48-150200.13.8.1
  • bluez SLE Workstation Extension 15 SP3, SLE Module for Desktop Applications 15 SP3, SLE Module for Basesystem 15 SP3 +1 more 5.55-150300.3.11.1
  • bluez SLES for SAP 15 SP1, SLES for SAP 15, SLES 15-LTSS +7 more 5.48-150000.5.31.1

suse advisories SUSE-SU-2022:3247-1SUSE-SU-2022:2948-1SUSE-SU-2022:2883-1SUSE-SU-2022:2837-1

  • bluez openSUSE Tumbleweed 5.65-3.1

opensuse advisories openSUSE-SU-2024:12394-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2022-0204 updated cvss 6.8

bluez: heap-based buffer overflow in the implementation of the gatt protocol

  • Red Hat Enterprise Linux 6 bluez, bluez-alsa, bluez-cups, bluez-libs, bluez-compat, bluez-gstreamer Red Hat Enterprise Linux 7 bluez, bluez-cups, bluez-libs, bluez-hid2hci Red Hat Enterprise Linux 8 bluez, bluez-cups, bluez-libs, bluez-obexd, bluez-hid2hci Red Hat Enterprise Linux 9 bluez, bluez-cups, bluez-libs, bluez-obexd
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
6 mo ago

Exploit prediction

1.79% chance of exploitation in the next 30 days, higher than 78% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • github.com https://github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CISA ADP 3.1 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA 3.1 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 5.8 AV:A/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • n/a bluez

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
  • CWE-190 Integer Overflow or Wraparound

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.