CVE-2020-0556
12.03.2020, 21:15
Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent accessEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| bluez | bluez | 𝑥 < 5.54 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 19.10 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
| opensuse | leap | 15.1 |
| opensuse | leap | 15.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| bluez |
| ||||||||||||||||||||||||||||||||||||||||||||||
| bluez-deprecated |
| ||||||||||||||||||||||||||||||||||||||||||||||
| bluez-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||
| bluez-zsh-completion |
| ||||||||||||||||||||||||||||||||||||||||||||||
| libbluetooth3 |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||
|---|---|---|---|---|---|
| bluez |
| ||||
| bluez-cups |
| ||||
| bluez-hid2hci |
| ||||
| bluez-libs |
| ||||
| bluez-libs-devel |
| ||||
| bluez-obexd |
|
References