CVE-2021-3658 log

Source
Severity Low
Remote Yes
Type Information disclosure
Description
bluetoothd from bluez before version 5.61 incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.
Group Package Affected Fixed Severity Status Ticket
AVG-2231 bluez 5.60-1 5.61-1 Low Fixed
References
https://bugzilla.redhat.com/show_bug.cgi?id=1984728
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=b497b5942a8beb8f89ca1c359c54ad67ec843055