UBUNTU-CVE-2020-0556

See a problem?

Source

https://ubuntu.com/security/notices/UBUNTU-CVE-2020-0556

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-0556.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2020-0556

Related

Published

2020-03-12T21:15:00Z

Modified

2020-03-12T21:15:00Z

Severity

7.1 (High) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L CVSS Calculator

Summary

[none]

Details

Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access

References

Affected packages

Ubuntu:16.04:LTS / bluez

Package

Name: bluez
Purl: pkg:deb/ubuntu/bluez@5.37-0ubuntu5.3?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.37-0ubuntu5.3

Affected versions

5.*

5.35-0ubuntu2

5.36-0ubuntu1

5.37-0ubuntu5

5.37-0ubuntu5.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "libbluetooth3": "5.37-0ubuntu5.3",
            "bluez-dbgsym": "5.37-0ubuntu5.3",
            "bluez-hcidump": "5.37-0ubuntu5.3",
            "bluez-hcidump-dbgsym": "5.37-0ubuntu5.3",
            "bluez-obexd-dbgsym": "5.37-0ubuntu5.3",
            "bluez-cups-dbgsym": "5.37-0ubuntu5.3",
            "bluez-dbg": "5.37-0ubuntu5.3",
            "libbluetooth-dev": "5.37-0ubuntu5.3",
            "bluetooth": "5.37-0ubuntu5.3",
            "libbluetooth3-dbgsym": "5.37-0ubuntu5.3",
            "bluez-tests-dbgsym": "5.37-0ubuntu5.3",
            "bluez-cups": "5.37-0ubuntu5.3",
            "bluez-tests": "5.37-0ubuntu5.3",
            "libbluetooth-dev-dbgsym": "5.37-0ubuntu5.3",
            "libbluetooth3-dbg": "5.37-0ubuntu5.3",
            "bluez": "5.37-0ubuntu5.3",
            "bluez-obexd": "5.37-0ubuntu5.3"
        }
    ]
}

Ubuntu:18.04:LTS / bluez

Package

Name: bluez
Purl: pkg:deb/ubuntu/bluez@5.48-0ubuntu3.4?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.48-0ubuntu3.4

Affected versions

5.*

5.46-0ubuntu3

5.46-0ubuntu4

5.48-0ubuntu3

5.48-0ubuntu3.1

5.48-0ubuntu3.2

5.48-0ubuntu3.3

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "libbluetooth3": "5.48-0ubuntu3.4",
            "bluetooth": "5.48-0ubuntu3.4",
            "bluez-hcidump": "5.48-0ubuntu3.4",
            "bluez-cups": "5.48-0ubuntu3.4",
            "bluez-tests": "5.48-0ubuntu3.4",
            "libbluetooth3-dbg": "5.48-0ubuntu3.4",
            "bluez-dbg": "5.48-0ubuntu3.4",
            "libbluetooth-dev": "5.48-0ubuntu3.4",
            "bluez": "5.48-0ubuntu3.4",
            "bluez-obexd": "5.48-0ubuntu3.4"
        }
    ]
}