CVE:CVE-2022-39176
CNNVD:CNNVD-202209-083
BlueZ是一款使用C语言编写的蓝牙协议堆栈，它主要用于提供对核心蓝牙层和协议的支持。
BlueZ 5.59之前的版本存在安全漏洞，该漏洞源于profiles/audio/avrcp.c组件不能验证params_len导致近源攻击者可以获取敏感信息。
solution:Upgrade bluez bluez to a higher version than 5.59,and avoid the version (,5.59); Upgrade canonical ubuntu_linux to a higher version than 18.04,20.04,and avoid the version 18.04,20.04; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0