EulerOS 2.0 SP9 : bluez (EulerOS-SA-2020-2425)

According to the version of the bluez package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a...

Photon OS 3.0: Bluez PHSA-2020-3.0-0158

An update of the bluez package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0158. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid142215...

Important Photon OS Security Update - PHSA-2020-3.0-0158

Updates of 'bluez' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2020-0158

Updates of 'bluez' packages of Photon OS have been released...

Amazon Linux 2 : bluez (ALAS-2020-1504)

The version of bluez installed on the remote host is prior to 5.44-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1504 advisory. Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation ...

Design/Logic Flaw

Blueman is a GTK+ Bluetooth Manager. In Blueman before 2.1.4, the DhcpClient method of the D-Bus interface to blueman-mechanism is prone to an argument injection vulnerability. The impact highly depends on the system configuration. If Polkit-1 is disabled and for versions lower than 2.0.6, any...

CVE-2020-15238 Local privilege escalation Blueman

Blueman is a GTK+ Bluetooth Manager. In Blueman before 2.1.4, the DhcpClient method of the D-Bus interface to blueman-mechanism is prone to an argument injection vulnerability. The impact highly depends on the system configuration. If Polkit-1 is disabled and for versions lower than 2.0.6, any...

CVE-2020-15238

Blueman is a GTK+ Bluetooth Manager. In Blueman before 2.1.4, the DhcpClient method of the D-Bus interface to blueman-mechanism is prone to an argument injection vulnerability. The impact highly depends on the system configuration. If Polkit-1 is disabled and for versions lower than 2.0.6, any...

Medium: bluez

Issue Overview: Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access CVE-2020-0556 Affected Packages: bluez Note: This advisory is applicable to Amazon Linux 2 A...

SUSE-SU-2020:3034-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2020-27153: Fixed crash on disconnect bsc1177895. - CVE-2020-0556: Fixed potential escalation of privilege and denial of service via adjacent access, caused by improper access control bsc1166751...

Oracle Linux 7 : kernel (ELSA-2020-4276)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4276 advisory. - net bluetooth: l2cap: Fix calling skfilter on non-socket based channel Gopal Tiwari 1888253 CVE-2020-12351 Tenable has extracted the preceding...

Debian: Security Advisory (DLA-2410-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2410-1 : bluez security update

It was discovered that there was a double-free vulnerability in bluez, a suite of Bluetooth tools, utilities and daemons. For Debian 9 'Stretch', this problem has been fixed in version 5.43-2+deb9u3. We recommend that you upgrade your bluez packages. For the detailed security status of bluez plea...

DLA-2410-1 bluez - security update

Bulletin has no description...

EulerOS Virtualization 3.0.2.2 : bluez (EulerOS-SA-2020-2188)

According to the version of the bluez package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation ...

Scientific Linux Security Update : bluez on SL7.x x86_64 (20201001)

Security Fixes : - bluez: Improper access control in subsystem could result in privilege escalation and DoS CVE-2020-0556 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141686; scriptversion"1.3";...

Oracle Linux 8 : kernel (ELSA-2020-4286)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4286 advisory. - net Bluetooth: L2CAP: Fix calling skfilter on non-socket based channel Gopal Tiwari 1888256 1888258 CVE-2020-12351 - net Bluetooth: A2MP: Fix not...

CentOS 7 : bluez (RHSA-2020:4001)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4001 advisory. - Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial ...

Linux kernel BlueZ implementation denial of service vulnerability

Linux kernel is an open source operating system. A security vulnerability exists in the Linux kernel BlueZ implementation, which can be exploited by a local attacker to submit a special request that can crash the system...

Arbitrary Code Execution

BlueZ is vulnerable to arbitrary code execution. A double free occurs in the gatttool disconnectcb routine from shared/att.c, allowing a remote attacker to potentially cause a denial of service or execute arbitrary code on the host OS during service discovery...