What’s Vulnerable › Vulnerabilities

CVE-2021-43400

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-11-04 · updated 2026-06-17
• Weakness: CWE-416

Description

An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D-Bus processing of a WriteValue call.

Affected products

• BlueZ: 5.61
• Debian Linux: 10.0

References

• https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=838c0dc7641e1c991c0f3027bf94bee4606012f8
• https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html
• https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=838c0dc7641e1c991c0f3027bf94bee4606012f8
• https://lists.debian.org/debian-lts-announce/2022/10/msg00026.html
• https://lists.debian.org/debian-lts-announce/2024/09/msg00022.html

Get alerted when CVE-2021-43400 or the next vulnerability affects your stack