medium5.7
CVE-2021-0129
Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.
Impact
Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bluez | Bluez | before 5.57 |
| Redhat | Enterprise Linux | Versions 7.0, 8.0 |
| Debian | Debian Linux | Version 9.0 |
References
- NVD record
- CVE.org record
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
- https://lists.debian.org/debian-lts-announce/2021/06/msg00022.html
- https://security.gentoo.org/glsa/202209-16
- https://security.netapp.com/advisory/ntap-20210716-0002/
- https://www.debian.org/security/2021/dsa-4951
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00517.html
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
- https://lists.debian.org/debian-lts-announce/2021/06/msg00022.html
- https://security.gentoo.org/glsa/202209-16
- https://security.netapp.com/advisory/ntap-20210716-0002/
- https://www.debian.org/security/2021/dsa-4951
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00517.html