USN-4989-1: BlueZ vulnerabilities
It was discovered that BlueZ incorrectly checked certain permissions when pairing. A local attacker could possibly use this issue to impersonate devices. (CVE-2020-26558) Jay LV discovered that BlueZ incorrectly handled redundant disconnect MGMT events. A local attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-27153) Ziming Zhang discovered that BlueZ incorrectly handled certain array indexes. A local attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly obtain sensitive information. This issue only affected Ubuntu 20.04 LTS and Ubuntu 20.10. (CVE-2021-3588)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID of this security advisory?
The vulnerability ID of this security advisory is USN-4989-1.
What is the severity of CVE-2020-26558?
The severity of CVE-2020-26558 is not specified in the security advisory.
What is the severity of CVE-2020-27153?
The severity of CVE-2020-27153 is not specified in the security advisory.
How do I fix the BlueZ vulnerabilities?
To fix the BlueZ vulnerabilities, you should update the affected software to the recommended versions mentioned in the security advisory.
Where can I find more information about the BlueZ vulnerabilities?
You can find more information about the BlueZ vulnerabilities in the references section of the security advisory.