CVE-2020-27153

 

Published at: - 15-10-2020 05:15

Last modified: - 05-04-2022 05:59

Total changes: - 7

Description

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

 

Verification logic

 

Reference

• https://bugzilla.redhat.com/show_bug.cgi?id=1884817
• https://github.com/bluez/bluez/commit/5a180f2ec9edfacafd95e5fed20d36fe8e077f07
• https://github.com/bluez/bluez/commit/1cd644db8c23a2f530ddb93cebed7dacc5f5721a
• [debian-lts-announce] 20201021 [SECURITY] [DLA 2410-1] bluez security update-Mailing List, Third Party Advisory
• GLSA-202011-01-Third Party Advisory
• openSUSE-SU-2020:1876-Mailing List, Third Party Advisory
• openSUSE-SU-2020:1880-Mailing List, Third Party Advisory
• DSA-4951-Third Party Advisory

 

Keywords

NVD

 

CVE-2020-27153

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures