Vulnerability · Published May 3, 2024 · Assigned by zdi
CVE-2023-27349BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability
High 7.1
In plain English
A high-severity security flaw in BlueZ from BlueZ. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device. The specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-19908.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | bluez | 5.72-2.el9 | ALSA-2024:9413 |
| AlmaLinux:8 | bluez-cups | 5.63-5.el8_10.alma.1 | ALSA-2025:4043 |
| AlmaLinux:9 | bluez-cups | 5.72-2.el9 | ALSA-2024:9413 |
| AlmaLinux:9 | bluez-libs | 5.72-2.el9 | ALSA-2024:9413 |
| AlmaLinux:8 | bluez-libs-devel | 5.63-5.el8_10.alma.1 | ALSA-2025:4043 |
| AlmaLinux:9 | bluez-libs-devel | 5.72-2.el9 | ALSA-2024:9413 |
| AlmaLinux:9 | bluez-obexd | 5.72-2.el9 | ALSA-2024:9413 |
| Debian:12 | bluez | 5.66-1+deb12u2 | DEBIAN-CVE-2023-27349 |
| Debian:13 | bluez | 5.68-1 | DEBIAN-CVE-2023-27349 |
| Debian:14 | bluez | 5.68-1 | DEBIAN-CVE-2023-27349 |
| Rocky Linux:8 | bluez | 0:5.63-5.el8_10 | RLSA-2025:4043 |
| Rocky Linux:9 | bluez | 0:5.72-2.el9 | RLSA-2024:9413 |
| Ubuntu:22.04:LTS | bluez | 5.64-0ubuntu1.3 | USN-6809-1 |
| Ubuntu:22.04:LTS | bluez | 5.64-0ubuntu1.3 | UBUNTU-CVE-2023-27349 |
Affected products (as reported)
Weakness: CWE-129 · Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H