Lucene search
+L

1757 matches found

Tenable Nessus
Tenable Nessus
added 2020/03/31 12:00 a.m.34 views

RHEL 7 : bluez (RHSA-2020:1101)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1101 advisory. The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start script...

4.5CVSS5.7AI score0.00458EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2020/03/31 12:00 a.m.31 views

Ubuntu: Security Advisory (USN-4311-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.01042EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2020/03/30 5:49 p.m.91 views

USN-4311-1: BlueZ vulnerabilities

It was discovered that BlueZ incorrectly handled bonding HID and HOGP devices. A local attacker could possibly use this issue to impersonate non-bonded devices. CVE-2020-0556 It was discovered that BlueZ incorrectly handled certain commands. A local attacker could use this issue to cause BlueZ to...

7.8CVSS6.9AI score0.01042EPSS
SaveExploits0
OSV
OSV
added 2020/03/30 5:49 p.m.12 views

USN-4311-1 bluez vulnerabilities

It was discovered that BlueZ incorrectly handled bonding HID and HOGP devices. A local attacker could possibly use this issue to impersonate non-bonded devices. CVE-2020-0556 It was discovered that BlueZ incorrectly handled certain commands. A local attacker could use this issue to cause BlueZ to...

7.8CVSS6.9AI score0.01042EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/03/30 12:00 a.m.54 views

Debian DSA-4647-1 : bluez - security update

It was reported that the BlueZ's HID and HOGP profile implementations don't specifically require bonding between the device and the host. Malicious devices can take advantage of this flaw to connect to a target host and impersonate an existing HID device without security or to cause an SDP or GAT...

7.1CVSS5.9AI score0.01042EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2020/03/29 12:00 a.m.43 views

Debian: Security Advisory (DSA-4647-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.9AI score0.01042EPSS
SaveExploits0References4
Photon
Photon
added 2020/03/27 12:00 a.m.70 views

Important Photon OS Security Update - PHSA-2020-3.0-0073

Updates of 'bluez', 'zsh', 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'python3', 'python2' packages of Photon OS have been released...

7.2CVSS6.6AI score0.03513EPSS
SaveExploits4
Photon
Photon
added 2020/03/27 12:00 a.m.71 views

Important Photon OS Security Update - PHSA-2020-0073

Updates of 'bluez', 'python3', 'python2', 'zsh', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

7.2CVSS1.7AI score0.03513EPSS
SaveExploits4
Debian
Debian
added 2020/03/26 10:37 p.m.36 views

[SECURITY] [DSA 4647-1] bluez security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4647-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 26, 2020 https://www.debian.org/security/faq -...

5.8CVSS1.2AI score0.01042EPSS
SaveExploits0
Debian
Debian
added 2020/03/26 10:37 p.m.101 views

[SECURITY] [DSA 4647-1] bluez security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4647-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 26, 2020 https://www.debian.org/security/faq -...

7.1CVSS6.9AI score0.01042EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/03/26 12:00 a.m.46 views

GLSA-202003-49 : BlueZ: Security bypass

The remote host is affected by the vulnerability described in GLSA-202003-49 BlueZ: Security bypass It was discovered that the HID and HOGP profiles implementations in BlueZ did not specifically require bonding between the device and the host. Impact : A remote attacker with adjacent access could...

7.1CVSS6AI score0.01042EPSS
SaveExploits0References2
OSV
OSV
added 2020/03/26 12:00 a.m.35 views

DSA-4647-1 bluez - security update

Bulletin has no description...

7.1CVSS6.6AI score0.01042EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:00 a.m.10 views

The vulnerability of many components of the BlueZ software suite relates to insecure management of privileges, allowing attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of many components of the BlueZ software package is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.1CVSS6.4AI score0.01042EPSS
SaveExploits0References9Affected Software3
ArchLinux
ArchLinux
added 2020/03/19 12:00 a.m.35 views

[ASA-202003-13] bluez: access restriction bypass

Arch Linux Security Advisory ASA-202003-13 ========================================== Severity: High Date : 2020-03-19 CVE-ID : CVE-2020-0556 Package : bluez Type : access restriction bypass Remote : Yes Link : https://security.archlinux.org/AVG-1116 Summary ======= The package bluez before versi...

7.1CVSS1.9AI score0.01042EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2020/03/17 3:10 p.m.43 views

CVE-2020-0556

Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access Mitigation Disable Bluetooth. Instructions on disabling bluetooth in Red Hat Enterprise Linux are available ...

7.1CVSS5.1AI score0.01042EPSS
SaveExploits0References4
Intel
Intel
added 2020/03/16 12:00 a.m.37 views

BlueZ Advisory

Summary: A potential security vulnerability in BlueZ may allow escalation of privilege and denial of service. BlueZ is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0556 Description: Improper access control in subsystem for BlueZ befor...

7.1CVSS7.1AI score0.01042EPSS
SaveExploits0
CNVD
CNVD
added 2020/03/13 12:00 a.m.4 views

BlueZ Access Control Error Vulnerability

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layers and protocols. An Access Control Error vulnerability exists in subsystems in BlueZ versions prior to 5.54. The vulnerability arises from a network system or product not properly...

7.1CVSS6.8AI score0.01042EPSS
SaveExploits0
NVD
NVD
added 2020/03/12 9:15 p.m.26 views

CVE-2020-0556

Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access...

7.1CVSS6.9AI score0.01042EPSS
SaveExploits0References7
OSV
OSV
added 2020/03/12 9:15 p.m.0 views

DEBIAN-CVE-2020-0556

Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access...

7.1CVSS6AI score0.01042EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/12 9:15 p.m.33 views

CVE-2020-0556

Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access...

7.1CVSS7.2AI score
SaveExploits0References7
Rows per page
Query Builder