CVE-2020-27153

Publication date 15 October 2020

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
bluez	22.04 LTS jammy	Fixed 5.55-0ubuntu1
	21.10 impish	Fixed 5.55-0ubuntu1
	21.04 hirsute	Fixed 5.55-0ubuntu1
	20.10 groovy	Fixed 5.55-0ubuntu1
	20.04 LTS focal	Fixed 5.53-0ubuntu3.2
	18.04 LTS bionic	Fixed 5.48-0ubuntu3.5
	16.04 LTS xenial	Fixed 5.37-0ubuntu5.3+esm1 Ubuntu Pro
	14.04 LTS trusty	Not in release

Get expanded security coverage with Ubuntu Pro

Reduce your average CVE exposure time from 98 days to 1 day with expanded CVE patching, ten-years security maintenance and optional support for the full stack of open-source applications. Free for personal use.

Get Ubuntu Pro

Notes

mdeslaur

per Red Hat, there is currently no known path to code execution as there is a small time window between the two calls to free() as such, marking as low priority.

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
bluez	Upstream: 1cd644d

Severity score breakdown

Parameter	Value
Base score	8.6 · High
Attack vector	Network
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	Low
Integrity impact	Low
Availability impact	High
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H