CVE-2020-24490

Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ...

CVE-2020-24490

CVE-2020-24490 is reported in the Mageia advisory MGASA-2020-0392 as a Bluetooth L2CAP/extended advertising processing flaw in the Linux kernel Bluetooth implementation. A remote attacker within an adjacent range can trigger a heap buffer overflow by sending a specially crafted Bluetooth packet, ...

CVE-2020-24490

Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ...

CentOS 8 : bluez (CESA-2020:1912)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1912 advisory. - bluez: failure in disabling Bluetooth discoverability in certain cases may lead to the unauthorized pairing of Bluetooth devices CVE-2018-10910 Note that Ness...

Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2020-2507)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : bluez (EulerOS-SA-2020-2507)

According to the version of the bluez packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a...

SUSE SLES12 Security Update : bluez (SUSE-SU-2020:3516-1)

This update for bluez fixes the following issues : CVE-2020-0556: Fixed improper access control which may lead to escalation of privilege and denial of service by an unauthenticated user bsc1166751. Note that Tenable Network Security has extracted the preceding description block directly from the...

SUSE SLED15 / SLES15 Security Update : bluez (SUSE-SU-2020:3165-1)

This update for bluez fixes the following issues : CVE-2020-27153: Fixed possible crash on disconnect bsc1177895. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it a...

SUSE SLED15 / SLES15 Security Update : bluez (SUSE-SU-2020:3034-1)

This update for bluez fixes the following issues : CVE-2020-27153: Fixed crash on disconnect bsc1177895. CVE-2020-0556: Fixed potential escalation of privilege and denial of service via adjacent access, caused by improper access control bsc1166751. Note that Tenable Network Security has extracted...

[ASA-202012-12] blueman: privilege escalation

Arch Linux Security Advisory ASA-202012-12 ========================================== Severity: High Date : 2020-12-09 CVE-ID : CVE-2020-15238 Package : blueman Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1259 Summary ======= The package blueman before versio...

SUSE-SU-2020:3516-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2020-0556: Fixed improper access control which may lead to escalation of privilege and denial of service by an unauthenticated user bsc1166751...

DEBIAN-CVE-2020-12352

Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2020-12352

Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2020-12352

Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

DEBIAN-CVE-2020-12351

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-12351

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-12351

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

Improper access control

Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

Input validation

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-12352

CVE-2020-12352 corresponds to an issue in the Linux Bluetooth stack (BlueZ) where improper access control may allow an unauthenticated user with adjacent access to trigger information disclosure. The description and connected sources indicate this is a local/adjacent-network risk without user int...