{"schema_version":"1.9.0","id":"CVE-2022-0204","published":"2022-03-09T00:00:00Z","modified":"2026-08-12T12:49:11.262591Z","aliases":["GHSA-479m-xcq5-9g2q"],"related":["SUSE-SU-2022:2837-1","SUSE-SU-2022:2883-1","SUSE-SU-2022:2948-1","SUSE-SU-2022:3247-1","openSUSE-SU-2024:12394-1"],"details":"A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/bluez/bluez","events":[{"introduced":"0"},{"fixed":"da07239606d62526287d55f35a778770b04196ea"},{"fixed":"591c546c536b42bef696d027f64aa22434f8c3f0"}],"database_specific":{"cpe":"cpe:2.3:a:bluez:bluez:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"5.63"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["bluez versions prior to 5.63","5.62","5.61","5.60","5.59","5.58","5.57","5.56","5.55","5.54","5.53","5.52","5.51","5.50","5.49","5.48","5.47","5.46","5.45","5.44","5.43","5.42","5.41","5.40","5.39","5.38","5.37","5.36","5.35","5.34","5.33","5.32","5.31","5.30","5.29","5.28","5.27","5.26","5.25","5.24","5.23","5.22","5.21","5.20","5.19","5.18","5.17","5.16","5.15","5.14","5.13","5.12","5.11","5.10","5.9","5.8","5.7","5.6","5.5","5.4","5.3","5.2","5.1","5.0","4.101","4.100","4.99","4.98","4.97","4.96","4.95","4.94","4.93","4.92","4.91","4.90","4.89","4.88","4.87","4.86","4.85","4.84","4.83","4.82","4.81","4.80","4.79","4.78","4.77","4.76","4.75","4.74","4.73","4.72","4.71","4.70","4.69","4.68","4.67","4.66","4.65","4.64","4.63","4.62","4.61","4.60","4.59","4.58","4.57","4.56","4.55","4.54","4.53","4.52","4.51","4.50","4.49","4.48","4.47","4.46","4.45","4.44","4.43","4.42","4.41","4.40","4.39","4.38","4.37","4.36","4.35","4.34","4.33","4.32","4.31","4.30","4.29","4.28","4.27","4.26","4.25","4.24","4.23","4.22","4.21","4.20","4.19","4.18","4.17","4.16","4.15","4.14","4.13","4.12","4.11","4.10","4.9","4.8","4.7","4.6","4.5","4.2","4.1","4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0204.json","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["245983701743678431712287570712867372852","204872452563842121916948163942014134051","74592790094705381018705849185625643364","97652621860010509070483822321576483347","100595917246871049992004168001243166733","304996773202596487567244761678739916092","287623655062436781374106337048619503982","130799082809774549235180667228244751232","17973078705912842330586538744745511373"],"threshold":0.9},"id":"CVE-2022-0204-27df0139","signature_type":"Line","signature_version":"v1","source":"https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0","target":{"file":"src/shared/gatt-server.c"}},{"deprecated":false,"digest":{"function_hash":"16905689294561478361334181224246022371","length":1120},"id":"CVE-2022-0204-afe5e0ab","signature_type":"Function","signature_version":"v1","source":"https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0","target":{"file":"src/shared/gatt-server.c","function":"prep_write_cb"}},{"deprecated":false,"digest":{"function_hash":"185952619249472048974319101553271115226","length":1034},"id":"CVE-2022-0204-f4573241","signature_type":"Function","signature_version":"v1","source":"https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0","target":{"file":"src/shared/gatt-server.c","function":"write_cb"}}],"vanir_signatures_modified":"2026-08-12T12:49:11Z"}}],"references":[{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00022.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0204.json"},{"type":"ADVISORY","url":"https://github.com/bluez/bluez/security/advisories/GHSA-479m-xcq5-9g2q"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0204"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202209-16"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2039807"},{"type":"FIX","url":"https://github.com/bluez/bluez/commit/591c546c536b42bef696d027f64aa22434f8c3f0"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html"}],"database_specific":{"cna_assigner":"redhat","cwe_ids":["CWE-119"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0204.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}