BlueZ: Privilege Escalation

BlueZ: Privilege Escalation Multiple vulnerabilities have been discovered in Bluez, the worst of which can lead to privilege escalation. bluez 2024-01-05 2024-01-05 919383 remote 5.70-r1 5.70-r1

BlueZ is the canonical bluetooth tools and system daemons package for Linux.

Multiple vulnerabilities have been discovered in BlueZ. Please review the CVE identifiers referenced below for details.

An attacker may inject unauthenticated keystrokes via Bluetooth, leading to privilege escalation or denial of service.

There is no known workaround at this time.

All BlueZ users should upgrade to the latest version:


          # emerge --sync
          # emerge --ask --oneshot --verbose ">=net-wireless/bluez-5.70-r1"

CVE-2023-45866 graaff graaff