high7.1
CVE-2020-0556
Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial o…
Impact
Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bluez | Bluez | before 5.54 |
| Canonical | Ubuntu Linux | Versions 16.04, 18.04, 19.10 |
| Debian | Debian Linux | Versions 8.0, 9.0, 10.0 |
| Opensuse | Leap | Versions 15.1, 15.2 |
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00055.html
- https://lists.debian.org/debian-lts-announce/2020/06/msg00008.html
- https://security.gentoo.org/glsa/202003-49
- https://usn.ubuntu.com/4311-1/
- https://www.debian.org/security/2020/dsa-4647
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00352.html
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00055.html
- https://lists.debian.org/debian-lts-announce/2020/06/msg00008.html
- https://security.gentoo.org/glsa/202003-49
- https://usn.ubuntu.com/4311-1/
- https://www.debian.org/security/2020/dsa-4647
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00352.html