Most recent entries from all

ALSA-2021:1598 — Moderate: bluez security update

Affected: AlmaLinux:8: bluez-libs-devel

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.

Security Fix(es):

* bluez: double free in gatttool client disconnect callback handler in src/shared/att.c could lead to DoS or RCE (CVE-2020-27153)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-03430

EUVD-2026-291540

fkie_cve-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.

GHSA-hrr3-cwf8-mjp6

gsd-2020-27153

OESA-2021-1307 — bluez security update

Affected: openEuler:20.03-LTS-SP1: bluez, openEuler:20.03-LTS-SP2: bluez

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fix(es): In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.(CVE-2020-27153)

openSUSE-SU-2020:1876-1 — Security update for bluez

Security update for bluez

SUSE-SU-2020:3034-1 — Security update for bluez

Security update for bluez

UBUNTU-CVE-2020-27153

Affected: Ubuntu:Pro:16.04:LTS: bluez, Ubuntu:18.04:LTS: bluez, Ubuntu:20.04:LTS: bluez