PatchTheCVEgattlib vulnerabilities and fixes
Recent CVEs affecting gattlib, with upgrade or downgrade steps. 2 tracked.
gattlib has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-05-27. Highest priority: CVE-2021-33590 (score 63/100).
- CVE-2021-33590 CRITICAL 9.8 DOWNGRADE GattLib 0.3-rc1 has a stack-based buffer over-read in get_device_path_from_mac in dbus/gattlib.c.
- CVE-2019-6498 HIGH 8.8 DOWNGRADE GattLib 0.2 has a stack-based buffer over-read in gattlib_connect in dbus/gattlib.c because strncpy is misused
FAQ
How do I fix gattlib vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gattlib being exploited right now?
None of the tracked gattlib CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gattlib CVE should I patch first?
CVE-2021-33590 currently ranks highest (63/100): GattLib 0.3-rc1 has a stack-based buffer over-read in get_device_path_from_mac in dbus/gattlib.c..