Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia: 2020-0419 Critical: BlueZ Remote Code Execution Risk

mageia
Calendar Grey November 13, 2020
Dist Mageia Esm H88
Mageia has released an update for OpenSSL that mitigates a vulnerability which could potentially lead to data leaks or unauthorized access.
In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c

Summary

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event. (CVE-2020-27153)

References

- https://bugs.mageia.org/show_bug.cgi?id=27486

- https://lists.debian.org/debian-lts-announce/2020/10/msg00022.html

- https://lists.suse.com/pipermail/sle-security-updates/2020-October/007623.html

- - https://www.cve.org/CVERecord?id=CVE-2020-27153

Topics%20covered

Topics Covered

security advisory denial of service code execution remote attack Mageia BlueZ gatttool

Resolution

SRPMS

- 7/core/bluez-5.54-1.1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 13 Nov 2020
URL: https://advisories.mageia.org/MGASA-2020-0419.html
Type: security
CVE: CVE-2020-27153

Topics%20covered

Topics Covered

security advisory denial of service code execution remote attack Mageia BlueZ gatttool

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here