{"schema_version":"1.7.5","id":"CVE-2021-43400","published":"2021-11-04T23:15:10.350Z","modified":"2026-07-08T06:00:45.994033296Z","related":["SUSE-SU-2022:3687-1","SUSE-SU-2022:3691-1","SUSE-SU-2022:3981-1"],"details":"An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D-Bus processing of a WriteValue call.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/bluez/bluez","events":[{"introduced":"d61f9dc54c04f4fc5791398a0dbae59d671846bf"},{"last_affected":"d61f9dc54c04f4fc5791398a0dbae59d671846bf"}],"database_specific":{"cpe":"cpe:2.3:a:bluez:bluez:5.61:*:*:*:*:*:*:*","extracted_events":[{"introduced":"5.61"},{"last_affected":"5.61"}],"source":"CPE_STRING"}}],"versions":["5.61"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-43400.json"}}],"references":[{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00022.html"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html"},{"type":"FIX","url":"https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=838c0dc7641e1c991c0f3027bf94bee4606012f8"}],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"10.0"},{"last_affected":"10.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"}]}