EulerOS Virtualization 3.0.2.2 : bluez (EulerOS-SA-2020-2188)

According to the version of the bluez package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation ...

DLA-2410-1 bluez - security update

Bulletin has no description...

CentOS 7 : bluez (RHSA-2020:4001)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4001 advisory. - Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial ...

Linux kernel BlueZ implementation denial of service vulnerability

Linux kernel is an open source operating system. A security vulnerability exists in the Linux kernel BlueZ implementation, which can be exploited by a local attacker to submit a special request that can crash the system...

Arbitrary Code Execution

BlueZ is vulnerable to arbitrary code execution. A double free occurs in the gatttool disconnectcb routine from shared/att.c, allowing a remote attacker to potentially cause a denial of service or execute arbitrary code on the host OS during service discovery...

Google Warns of Zero-Click Bluetooth Flaws in Linux-based Devices

Google security researchers are warning of a new set of zero-click vulnerabilities in the Linux Bluetooth software stack that can allow a nearby unauthenticated, remote attacker to execute arbitrary code with kernel privileges on vulnerable devices. According to security engineer Andy Nguyen, the...

Google Warns of Zero-Click Bluetooth Flaws in Linux-based Devices

Google security researchers are warning of a new set of zero-click vulnerabilities in the Linux Bluetooth software stack that can allow a nearby unauthenticated, remote attacker to execute arbitrary code with kernel privileges on vulnerable devices. According to security engineer Andy Nguyen, the...

CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event. Mitigation This flaw can be mitigated by only...

CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

DEBIAN-CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

ALPINE-CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

UBUNTU-CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

Double free

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

CVE-2020-27153

BlueZ (Bluetooth protocol stack) vulnerability CVE-2020-27153: a double-free in gatttool’s disconnect_cb() in shared/att.c can be exploited during service discovery to trigger denial of service or potentially arbitrary code execution. Affected: BlueZ versions before 5.55. Impact observed as DoS a...

CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...