Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 43

Export CSV
CVE-2020-12352

kernel: net: bluetooth: information leak when processing certain AMP packets

Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.

CVSS 3.1 · 6.5 Medium EPSS 5.8% KEV · Not listed
Vendors
Bluez Linux Redhat
Products
Bluez Linux Kernel Enterprise Linux and 5 more
CVE-2020-0556

bluez: Improper access control in subsystem could result in privilege escalation and DoS

Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access

CVSS 3.1 · 7.1 High EPSS 1.0% KEV · Not listed
Vendors
Bluez Canonical Debian and 2 more
Products
Bluez Ubuntu Linux Debian Linux and 2 more
CVE-2018-10910

bluez: failure in disabling Bluetooth discoverability in certain cases may lead to the unauthorized pairing of Bluetooth devices

A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.

CVSS 3.0 · 4.5 Medium EPSS < 1% KEV · Not listed
Vendors
Bluez Canonical Redhat
Products
Bluez Ubuntu Linux Enterprise Linux