Lucene search

K
osvGoogleOSV:USN-4605-2
HistoryNov 03, 2020 - 2:50 a.m.

blueman vulnerability

2020-11-0302:50:57
Google
osv.dev
10
blueman
vulnerability
privilege escalation
policykit
authentication
update
denial of service
cve-2020-15238
d-bus
interface

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

24.1%

Vaisha Bernard discovered that blueman did not properly sanitize input on
the d-bus interface to blueman-mechanism. A local attacker could possibly
use this issue to escalate privileges and run arbitrary code or cause a
denial of service. (CVE-2020-15238)

While a previous security update fixed the issue, this update provides
additional improvements by enabling PolicyKit authentication for
privileged commands.