Debian Security Advisory DSA 782-1 - Due to missing input sanitization in the bluez-utils package, it is possible for an attacker to execute arbitrary commands supplied as the device name from the remote device.
fb543879e70119f5254b5ca8165f6a8b1c313acc9fee8d0bba01a49d6da69e9c
Gentoo Linux Security Advisory GLSA 200508-09 - The name of a Bluetooth device is improperly validated by the hcid utility when a remote device attempts to pair itself with a computer. Versions less than 2.19 are affected.
9d8575a59702648b07b2cce8826e4aff6fdb3e7bd6a2b40ba21dda4416ec2d5e