Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-15710

Опубликовано: 19 нояб. 2020
Источник: ubuntu
Приоритет: medium
CVSS2: 3.6
CVSS3: 5.3

Описание

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in 1:8.0-0ubuntu3.14.

РелизСтатусПримечание
bionic

not-affected

1:11.1-1ubuntu7
devel

not-affected

1:11.1-1ubuntu7
esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

1:11.1-1ubuntu7
esm-infra/focal

not-affected

1:11.1-1ubuntu7
esm-infra/xenial

released

1:8.0-0ubuntu3.14
focal

not-affected

1:11.1-1ubuntu7
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

Показывать по

3.6 Low

CVSS2

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
nvd
около 5 лет назад

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in 1:8.0-0ubuntu3.14.

CVSS3: 5.3
debian
около 5 лет назад

Potential double free in Bluez 5 module of PulseAudio could allow a lo ...

github
больше 3 лет назад

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in 1:8.0-0ubuntu3.14.

3.6 Low

CVSS2

5.3 Medium

CVSS3