In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bluez-libs-devel | May 4, 2022 | Oct 15, 2020 |
| Alpine Linux | — | Upgrade bluez | Jan 5, 2021 | Oct 15, 2020 |
| Centos_linux | — | Upgrade bluezUpgrade bluez-obexd-debuginfoUpgrade bluez-libs-debuginfoUpgrade bluez-hid2hci-debuginfoUpgrade bluez-debugsourceUpgrade bluez-hid2hciUpgrade bluez-cupsUpgrade bluez-cups-debuginfoUpgrade bluez-debuginfoUpgrade bluez-libsUpgrade bluez-obexd | Jun 1, 2021 | Oct 15, 2020 |
| Debian | — | Upgrade bluez | Oct 23, 2020 | Oct 15, 2020 |
| Gentoo Linux | — | Upgrade net-wireless/bluez. | Nov 3, 2020 | Oct 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade bluez-libsUpgrade bluez | Sep 16, 2021 | Oct 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade bluez-libsUpgrade bluez | Oct 26, 2021 | Oct 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bluez-libsUpgrade bluezUpgrade bluez-libs-devel | Sep 7, 2021 | Oct 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bluezUpgrade bluez-obexdUpgrade bluez-hid2hciUpgrade bluez-libsUpgrade bluez-libs-devel | Dec 15, 2020 | Oct 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade bluez-help | Nov 3, 2020 | Oct 15, 2020 |
| Oracle_linux | — | Upgrade bluezUpgrade bluez-libsUpgrade bluez-cupsUpgrade bluez-hid2hciUpgrade bluez-libs-develUpgrade bluez-obexd | May 26, 2021 | Sep 6, 2020 |
| Redhat_linux | — | Upgrade bluez-libs-debuginfoUpgrade bluez-libsUpgrade bluez-debuginfoUpgrade bluez-hid2hciNo solution existsUpgrade bluez-debugsourceUpgrade bluezUpgrade bluez-cupsUpgrade bluez-cups-debuginfoUpgrade bluez-obexd-debuginfoUpgrade bluez-hid2hci-debuginfoUpgrade bluez-obexdUpgrade bluez-libs-devel | May 21, 2021 | Oct 15, 2020 |
| Rocky_linux | — | Upgrade bluez-libs-debuginfoUpgrade bluez-hid2hciUpgrade bluez-libs-develUpgrade bluez-obexd-debuginfoUpgrade bluez-libsUpgrade bluez-cups-debuginfoUpgrade bluez-obexdUpgrade bluez-debuginfoUpgrade bluezUpgrade bluez-debugsourceUpgrade bluez-cupsUpgrade bluez-hid2hci-debuginfo | Mar 12, 2024 | Oct 15, 2020 |
| Suse | — | Upgrade bluezUpgrade bluez-auto-enable-devicesUpgrade libbluetooth3Upgrade bluez-devel-32bitUpgrade bluez-testUpgrade bluez-develUpgrade libbluetooth3-32bitUpgrade bluez-cups | Apr 16, 2021 | Oct 15, 2020 |
| Ubuntu | — | Upgrade bluezUpgrade libbluetooth3 | Jun 17, 2021 | Oct 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 15, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub