bluez bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

EulerOS 2.0 SP2 : bluez (EulerOS-SA-2020-2331)

According to the version of the bluez packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege a...

EulerOS 2.0 SP9 : bluez (EulerOS-SA-2020-2407)

According to the version of the bluez package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a...

BlueZ: Arbitrary code execution

Background Set of tools to manage Bluetooth devices for Linux. Description It was discovered that there was a double-free vulnerability in Bluez after the service discovery which occurs after a Bluetoth Low Energy BLE connection has been established to a device. Impact A remote attacker, by...

EulerOS 2.0 SP9 : bluez (EulerOS-SA-2020-2425)

According to the version of the bluez package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a...

GLSA-202011-01 : BlueZ: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202011-01 BlueZ: Arbitrary code execution It was discovered that there was a double-free vulnerability in Bluez after the service discovery which occurs after a Bluetoth Low Energy BLE connection has been established to a device...

Photon OS 3.0: Bluez PHSA-2020-3.0-0158

An update of the bluez package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0158. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid142215...

Important Photon OS Security Update - PHSA-2020-3.0-0158

Updates of 'bluez' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2020-0158

Updates of 'bluez' packages of Photon OS have been released...

Amazon Linux 2 : bluez (ALAS-2020-1504)

The version of bluez installed on the remote host is prior to 5.44-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1504 advisory. Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation ...

Design/Logic Flaw

Blueman is a GTK+ Bluetooth Manager. In Blueman before 2.1.4, the DhcpClient method of the D-Bus interface to blueman-mechanism is prone to an argument injection vulnerability. The impact highly depends on the system configuration. If Polkit-1 is disabled and for versions lower than 2.0.6, any...

CVE-2020-15238 Local privilege escalation Blueman

Blueman is a GTK+ Bluetooth Manager. In Blueman before 2.1.4, the DhcpClient method of the D-Bus interface to blueman-mechanism is prone to an argument injection vulnerability. The impact highly depends on the system configuration. If Polkit-1 is disabled and for versions lower than 2.0.6, any...

CVE-2020-15238

Blueman is a GTK+ Bluetooth Manager. In Blueman before 2.1.4, the DhcpClient method of the D-Bus interface to blueman-mechanism is prone to an argument injection vulnerability. The impact highly depends on the system configuration. If Polkit-1 is disabled and for versions lower than 2.0.6, any...

Medium: bluez

Issue Overview: Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access CVE-2020-0556 Affected Packages: bluez Note: This advisory is applicable to Amazon Linux 2 A...

SUSE-SU-2020:3034-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2020-27153: Fixed crash on disconnect bsc1177895. - CVE-2020-0556: Fixed potential escalation of privilege and denial of service via adjacent access, caused by improper access control bsc1166751...

Oracle Linux 7 : kernel (ELSA-2020-4276)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4276 advisory. - net bluetooth: l2cap: Fix calling skfilter on non-socket based channel Gopal Tiwari 1888253 CVE-2020-12351 Tenable has extracted the preceding...

Debian: Security Advisory (DLA-2410-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2410-1 : bluez security update

It was discovered that there was a double-free vulnerability in bluez, a suite of Bluetooth tools, utilities and daemons. For Debian 9 'Stretch', this problem has been fixed in version 5.43-2+deb9u3. We recommend that you upgrade your bluez packages. For the detailed security status of bluez plea...

Oracle Linux 8 : kernel (ELSA-2020-4286)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4286 advisory. - net Bluetooth: L2CAP: Fix calling skfilter on non-socket based channel Gopal Tiwari 1888256 1888258 CVE-2020-12351 - net Bluetooth: A2MP: Fix not...

Scientific Linux Security Update : bluez on SL7.x x86_64 (20201001)

Security Fixes : - bluez: Improper access control in subsystem could result in privilege escalation and DoS CVE-2020-0556 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141686; scriptversion"1.3";...