Stay Secure with the Latest Linux Advisories

security advisorydenial of servicecode execution

Mageia: 2020-0419 Critical: BlueZ Remote Code Execution Risk

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event. (CVE-2020-27153) . MGASA-2020-0419 - Updated bluez packages fix a security vulnerability Publication date: 13 Nov 2020 URL: https://advisories.mageia.org/MGASA-2020-0419.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-27153 In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event. (CVE-2020-27153) References: - https://bugs.mageia.org/show_bug.cgi?id=27486 - https://lists.debian.org/debian-lts-announce/2020/10/msg00022.html - https://lists.suse.com/pipermail/sle-security-updates/2020-October/007623.html - - https://www.cve.org/CVERecord?id=CVE-2020-27153 SRPMS: - 7/core/bluez-5.54-1.1.mga7 . Mageia has released an update for OpenSSL that mitigates a vulnerability which could potentially lead to data leaks or unauthorized access.. BlueZ Update, Mageia Security, Remote Attack Fix, Denial of Service, Code Execution Risk. . Severity: Critical. LinuxSecurity.com Team

Nov 13, 2020 •Critical Mageia