CVE-2020-27153
High
Description
In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.
SeverityHigh
CVSS8.6
Exploit probability—
Product
Bluez
PublishedOct 15, 2020
First seenOct 15, 2020
Weakness typeCWE-415CWE-415
How to fix
Update
- bluez bluez5.55 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bluez bluez | v < 5.55 | 5.55 |
| debian debian_linux | 9.0, 10.0 | — |
| opensuse leap | 15.1, 15.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.