CVE-2020-0556

· HIGHModified

← All CVEs

CVSS v3.1

7.1

EPSS

1.03%

Published

Mar 12, 2020

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Affected Products (9)

bluez · bluez (up to 5.54)vulnerable

canonical · ubuntu_linuxvulnerable

debian · debian_linuxvulnerable

opensuse · leapvulnerable

References (14)

http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00008.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00055.html

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/06/msg00008.html

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/202003-49

Third Party Advisory

https://usn.ubuntu.com/4311-1/

Third Party Advisory

https://www.debian.org/security/2020/dsa-4647

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00352.html

PatchThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00008.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00055.html

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/06/msg00008.html

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/202003-49

Third Party Advisory

https://usn.ubuntu.com/4311-1/

Third Party Advisory

https://www.debian.org/security/2020/dsa-4647

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00352.html

PatchThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs