CVE-2020-27153 Use after free in n/a
A double free in BlueZ allows remote attackers to cause denial of service or execute code during Bluetooth service discovery.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-27153?
CVE-2020-27153 is a high-severity use after free vulnerability in Debian Debian Linux, published on 15 Oct 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.
Weakness: CWE-415
Which versions are affected by CVE-2020-27153?
It affects 3 products.
Linux distribution packages (31)
bluez-libs-devel AlmaLinux:8 | All versions | 5.52-4.el8.alma |
bluez-cups Red Hat:enterprise_linux:8::appstream | All versions | 0:5.52-4.el8 |
bluez-cups-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:5.52-4.el8 |
bluez-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:5.52-4.el8 |
bluez-debugsource Red Hat:enterprise_linux:8::appstream | All versions | 0:5.52-4.el8 |
bluez-hid2hci-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:5.52-4.el8 |
bluez-libs-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:5.52-4.el8 |
bluez-obexd-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:5.52-4.el8 |
bluez Red Hat:enterprise_linux:8::baseos | All versions | 0:5.52-4.el8 |
bluez-cups-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:5.52-4.el8 |
bluez-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:5.52-4.el8 |
bluez-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 0:5.52-4.el8 |
bluez-hid2hci Red Hat:enterprise_linux:8::baseos | All versions | 0:5.52-4.el8 |
bluez-hid2hci-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:5.52-4.el8 |
bluez-libs Red Hat:enterprise_linux:8::baseos | All versions | 0:5.52-4.el8 |
bluez-libs-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:5.52-4.el8 |
bluez-obexd Red Hat:enterprise_linux:8::baseos | All versions | 0:5.52-4.el8 |
bluez-obexd-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:5.52-4.el8 |
bluez-cups-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:5.52-4.el8 |
bluez-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:5.52-4.el8 |
bluez-debugsource Red Hat:enterprise_linux:8::crb | All versions | 0:5.52-4.el8 |
bluez-hid2hci-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:5.52-4.el8 |
bluez-libs-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:5.52-4.el8 |
bluez-libs-devel Red Hat:enterprise_linux:8::crb | All versions | 0:5.52-4.el8 |
bluez-obexd-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:5.52-4.el8 |
bluez Rocky Linux:8 | All versions | 0:5.52-4.el8 |
bluez SUSE:Linux Enterprise Module for Basesystem 15 SP1 | All versions | 5.48-5.28.1 |
bluez SUSE:Linux Enterprise Module for Desktop Applications 15 SP1 | All versions | 5.48-5.28.1 |
bluez SUSE:Linux Enterprise Workstation Extension 15 SP1 | All versions | 5.48-5.28.1 |
bluez openSUSE:Leap 15.1 | All versions | 5.48-lp151.8.15.1 |
bluez openSUSE:Leap 15.2 | All versions | 5.48-lp152.12.6.1 |
Products include Bluez Bluez, Debian Debian Linux, Opensuse Leap.
How do I fix CVE-2020-27153?
Upgrade to a fixed version.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2020-27153 being exploited?
There is no known exploitation of CVE-2020-27153 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2020-27153, ALSA-2021:1598, DEBIAN-CVE-2020-27153, DLA-2410-1, GHSA-hrr3-cwf8-mjp6, MGASA-2020-0419 and 7 more.