CVE-2020-0556: High severity BlueZ BlueZ vulnerability
Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/bluezto a version that resolves this vulnerability.Fixed in 5.54-1Fixed in 5.43-2+deb9u2Fixed in 5.50-1.2~deb10u1Fixed in 5.50-1.1 - Upgrade
Upgrade
debian/bluezto a version that resolves this vulnerability.Fixed in 5.55-3.1+deb11u1Fixed in 5.55-3.1+deb11u2Fixed in 5.66-1+deb12u2Fixed in 5.66-1+deb12u1Fixed in 5.82-1.1Fixed in 5.84-1Fixed in 5.85-3 - Upgrade
Upgrade
alpine/bluezto a version that resolves this vulnerability.Fixed in 5.50-r4 - Upgrade
Upgrade
alpine/bluezto a version that resolves this vulnerability.Fixed in 5.52-r1 - Upgrade
Upgrade
alpine/bluezto a version that resolves this vulnerability.Fixed in 5.54-r0 - Upgrade
Upgrade
alpine/bluezto a version that resolves this vulnerability.Fixed in 5.49-r3 - Upgrade
Upgrade
alpine/bluezto a version that resolves this vulnerability.Fixed in 5.50-r1 - Upgrade
Upgrade
alpine/obexd-enhancedto a version that resolves this vulnerability.Fixed in 5.54-r0 - Upgrade
Upgrade
BlueZto a version that resolves this vulnerability.Fixed in 5.54
Event History
Frequently Asked Questions
What is CVE-2020-0556?
CVE-2020-0556 is a vulnerability in BlueZ before version 5.54 that allows an unauthenticated user to potentially enable privilege escalation and denial of service via adjacent access.
How severe is CVE-2020-0556?
CVE-2020-0556 has a severity score of 7.1 (high).
Which software versions are affected by CVE-2020-0556?
BlueZ versions before 5.54 are affected by CVE-2020-0556.
How can I fix CVE-2020-0556?
To fix CVE-2020-0556, update your BlueZ software to version 5.54 or later.
Are there any additional resources about CVE-2020-0556?
Yes, you can refer to the following resources for more information: [Intel Security Advisory](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00352.html), [Gentoo Security Advisory](https://security.gentoo.org/glsa/202003-49), [Debian Security Advisory](https://www.debian.org/security/2020/dsa-4647).