Debian Security Advisory DSA 782-1 – Due to missing input sanitization in the bluez-utils package, it is possible for an attacker to execute arbitrary commands supplied as the device name from the remote device.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39553/dsa-782-1.txt
Source: https://packetstormsecurity.com/files/39553/Debian-Linux-Security-Advisory-782-1.html