Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:1876-1

Опубликовано: 08 нояб. 2020
Источник: suse-cvrf

Описание

Security update for bluez

This update for bluez fixes the following issues:

  • CVE-2020-27153: Fixed possible crash on disconnect (bsc#1177895).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.1
bluez-5.48-lp151.8.15.1
bluez-auto-enable-devices-5.48-lp151.8.15.1
bluez-cups-5.48-lp151.8.15.1
bluez-devel-5.48-lp151.8.15.1
bluez-devel-32bit-5.48-lp151.8.15.1
bluez-test-5.48-lp151.8.15.1
libbluetooth3-5.48-lp151.8.15.1
libbluetooth3-32bit-5.48-lp151.8.15.1

Ссылки

Описание

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.

Затронутые продукты
openSUSE Leap 15.1:bluez-5.48-lp151.8.15.1
openSUSE Leap 15.1:bluez-auto-enable-devices-5.48-lp151.8.15.1
openSUSE Leap 15.1:bluez-cups-5.48-lp151.8.15.1
openSUSE Leap 15.1:bluez-devel-32bit-5.48-lp151.8.15.1
Ссылки