Search CVE reports


Toggle filters

41 – 50 of 66 results

Status is adjusted based on your filters.


CVE-2020-26559

Medium priority

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used given the Provisioner’s public key, and...

168 affected packages

bluez, linux, linux-aws, linux-azure, linux-gcp...

Package 26.04 LTS
bluez —
linux —
linux-aws —
linux-azure —
linux-gcp —
linux-oracle —
linux-raspi —
linux-riscv —
linux-azure-fde —
linux-realtime —
linux-allwinner —
linux-allwinner-5.19 —
linux-aws-5.0 —
linux-aws-5.11 —
linux-aws-5.13 —
linux-aws-5.15 —
linux-aws-5.19 —
linux-aws-5.3 —
linux-aws-5.4 —
linux-aws-5.8 —
linux-aws-6.14 —
linux-aws-6.17 —
linux-aws-6.2 —
linux-aws-6.5 —
linux-aws-6.8 —
linux-aws-fips —
linux-aws-hwe —
linux-azure-4.15 —
linux-azure-5.11 —
linux-azure-5.13 —
linux-azure-5.15 —
linux-azure-5.19 —
linux-azure-5.3 —
linux-azure-5.4 —
linux-azure-5.8 —
linux-azure-6.11 —
linux-azure-6.14 —
linux-azure-6.17 —
linux-azure-6.2 —
linux-azure-6.5 —
linux-azure-6.8 —
linux-azure-edge —
linux-azure-fde-5.15 —
linux-azure-fde-5.19 —
linux-azure-fde-6.14 —
linux-azure-fde-6.17 —
linux-azure-fde-6.2 —
linux-azure-fde-6.8 —
linux-azure-fips —
linux-azure-nvidia —
linux-azure-nvidia-6.14 —
linux-bluefield —
linux-dell300x —
linux-fips —
linux-gcp-4.15 —
linux-gcp-5.11 —
linux-gcp-5.13 —
linux-gcp-5.15 —
linux-gcp-5.19 —
linux-gcp-5.3 —
linux-gcp-5.4 —
linux-gcp-5.8 —
linux-gcp-6.11 —
linux-gcp-6.14 —
linux-gcp-6.17 —
linux-gcp-6.2 —
linux-gcp-6.5 —
linux-gcp-6.8 —
linux-gcp-edge —
linux-gcp-fips —
linux-gke —
linux-gke-4.15 —
linux-gke-5.0 —
linux-gke-5.15 —
linux-gke-5.3 —
linux-gke-5.4 —
linux-gkeop —
linux-gkeop-5.15 —
linux-gkeop-5.4 —
linux-hwe —
linux-hwe-5.11 —
linux-hwe-5.13 —
linux-hwe-5.15 —
linux-hwe-5.19 —
linux-hwe-5.4 —
linux-hwe-5.8 —
linux-hwe-6.11 —
linux-hwe-6.14 —
linux-hwe-6.17 —
linux-hwe-6.2 —
linux-hwe-6.5 —
linux-hwe-6.8 —
linux-hwe-edge —
linux-ibm —
linux-ibm-5.15 —
linux-ibm-5.4 —
linux-ibm-6.8 —
linux-intel —
linux-intel-5.13 —
linux-intel-iot-realtime —
linux-intel-iotg —
linux-intel-iotg-5.15 —
linux-iot —
linux-kvm —
linux-laptop —
linux-lowlatency —
linux-lowlatency-hwe-5.15 —
linux-lowlatency-hwe-5.19 —
linux-lowlatency-hwe-6.11 —
linux-lowlatency-hwe-6.2 —
linux-lowlatency-hwe-6.5 —
linux-lowlatency-hwe-6.8 —
linux-lts-xenial —
linux-nvidia —
linux-nvidia-6.11 —
linux-nvidia-6.2 —
linux-nvidia-6.5 —
linux-nvidia-6.8 —
linux-nvidia-lowlatency —
linux-nvidia-tegra —
linux-nvidia-tegra-5.15 —
linux-nvidia-tegra-igx —
linux-oem —
linux-oem-5.10 —
linux-oem-5.14 —
linux-oem-5.17 —
linux-oem-5.6 —
linux-oem-6.0 —
linux-oem-6.1 —
linux-oem-6.11 —
linux-oem-6.14 —
linux-oem-6.17 —
linux-oem-6.5 —
linux-oem-6.8 —
linux-oem-osp1 —
linux-oracle-5.0 —
linux-oracle-5.11 —
linux-oracle-5.13 —
linux-oracle-5.15 —
linux-oracle-5.3 —
linux-oracle-5.4 —
linux-oracle-5.8 —
linux-oracle-6.14 —
linux-oracle-6.17 —
linux-oracle-6.5 —
linux-oracle-6.8 —
linux-raspi-5.4 —
linux-raspi-realtime —
linux-raspi2 —
linux-raspi2-5.3 —
linux-realtime-6.14 —
linux-realtime-6.17 —
linux-realtime-6.8 —
linux-riscv-5.11 —
linux-riscv-5.15 —
linux-riscv-5.19 —
linux-riscv-5.8 —
linux-riscv-6.14 —
linux-riscv-6.17 —
linux-riscv-6.5 —
linux-riscv-6.8 —
linux-snapdragon —
linux-starfive —
linux-starfive-5.19 —
linux-starfive-6.2 —
linux-starfive-6.5 —
linux-xilinx —
linux-xilinx-zynqmp —
Show all 168 packages Show less packages

CVE-2020-26557

Medium priority

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (without possession of the AuthValue used in the provisioning protocol) to determine the AuthValue via a brute-force attack (unless...

168 affected packages

bluez, linux, linux-aws, linux-azure, linux-gcp...

Package 26.04 LTS
bluez —
linux —
linux-aws —
linux-azure —
linux-gcp —
linux-oracle —
linux-raspi —
linux-riscv —
linux-azure-fde —
linux-realtime —
linux-allwinner —
linux-allwinner-5.19 —
linux-aws-5.0 —
linux-aws-5.11 —
linux-aws-5.13 —
linux-aws-5.15 —
linux-aws-5.19 —
linux-aws-5.3 —
linux-aws-5.4 —
linux-aws-5.8 —
linux-aws-6.14 —
linux-aws-6.17 —
linux-aws-6.2 —
linux-aws-6.5 —
linux-aws-6.8 —
linux-aws-fips —
linux-aws-hwe —
linux-azure-4.15 —
linux-azure-5.11 —
linux-azure-5.13 —
linux-azure-5.15 —
linux-azure-5.19 —
linux-azure-5.3 —
linux-azure-5.4 —
linux-azure-5.8 —
linux-azure-6.11 —
linux-azure-6.14 —
linux-azure-6.17 —
linux-azure-6.2 —
linux-azure-6.5 —
linux-azure-6.8 —
linux-azure-edge —
linux-azure-fde-5.15 —
linux-azure-fde-5.19 —
linux-azure-fde-6.14 —
linux-azure-fde-6.17 —
linux-azure-fde-6.2 —
linux-azure-fde-6.8 —
linux-azure-fips —
linux-azure-nvidia —
linux-azure-nvidia-6.14 —
linux-bluefield —
linux-dell300x —
linux-fips —
linux-gcp-4.15 —
linux-gcp-5.11 —
linux-gcp-5.13 —
linux-gcp-5.15 —
linux-gcp-5.19 —
linux-gcp-5.3 —
linux-gcp-5.4 —
linux-gcp-5.8 —
linux-gcp-6.11 —
linux-gcp-6.14 —
linux-gcp-6.17 —
linux-gcp-6.2 —
linux-gcp-6.5 —
linux-gcp-6.8 —
linux-gcp-edge —
linux-gcp-fips —
linux-gke —
linux-gke-4.15 —
linux-gke-5.0 —
linux-gke-5.15 —
linux-gke-5.3 —
linux-gke-5.4 —
linux-gkeop —
linux-gkeop-5.15 —
linux-gkeop-5.4 —
linux-hwe —
linux-hwe-5.11 —
linux-hwe-5.13 —
linux-hwe-5.15 —
linux-hwe-5.19 —
linux-hwe-5.4 —
linux-hwe-5.8 —
linux-hwe-6.11 —
linux-hwe-6.14 —
linux-hwe-6.17 —
linux-hwe-6.2 —
linux-hwe-6.5 —
linux-hwe-6.8 —
linux-hwe-edge —
linux-ibm —
linux-ibm-5.15 —
linux-ibm-5.4 —
linux-ibm-6.8 —
linux-intel —
linux-intel-5.13 —
linux-intel-iot-realtime —
linux-intel-iotg —
linux-intel-iotg-5.15 —
linux-iot —
linux-kvm —
linux-laptop —
linux-lowlatency —
linux-lowlatency-hwe-5.15 —
linux-lowlatency-hwe-5.19 —
linux-lowlatency-hwe-6.11 —
linux-lowlatency-hwe-6.2 —
linux-lowlatency-hwe-6.5 —
linux-lowlatency-hwe-6.8 —
linux-lts-xenial —
linux-nvidia —
linux-nvidia-6.11 —
linux-nvidia-6.2 —
linux-nvidia-6.5 —
linux-nvidia-6.8 —
linux-nvidia-lowlatency —
linux-nvidia-tegra —
linux-nvidia-tegra-5.15 —
linux-nvidia-tegra-igx —
linux-oem —
linux-oem-5.10 —
linux-oem-5.14 —
linux-oem-5.17 —
linux-oem-5.6 —
linux-oem-6.0 —
linux-oem-6.1 —
linux-oem-6.11 —
linux-oem-6.14 —
linux-oem-6.17 —
linux-oem-6.5 —
linux-oem-6.8 —
linux-oem-osp1 —
linux-oracle-5.0 —
linux-oracle-5.11 —
linux-oracle-5.13 —
linux-oracle-5.15 —
linux-oracle-5.3 —
linux-oracle-5.4 —
linux-oracle-5.8 —
linux-oracle-6.14 —
linux-oracle-6.17 —
linux-oracle-6.5 —
linux-oracle-6.8 —
linux-raspi-5.4 —
linux-raspi-realtime —
linux-raspi2 —
linux-raspi2-5.3 —
linux-realtime-6.14 —
linux-realtime-6.17 —
linux-realtime-6.8 —
linux-riscv-5.11 —
linux-riscv-5.15 —
linux-riscv-5.19 —
linux-riscv-5.8 —
linux-riscv-6.14 —
linux-riscv-6.17 —
linux-riscv-6.5 —
linux-riscv-6.8 —
linux-snapdragon —
linux-starfive —
linux-starfive-5.19 —
linux-starfive-6.2 —
linux-starfive-6.5 —
linux-xilinx —
linux-xilinx-zynqmp —
Show all 168 packages Show less packages

CVE-2020-26556

Medium priority

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue before the provisioning procedure times out, to...

168 affected packages

bluez, linux, linux-aws, linux-azure, linux-gcp...

Package 26.04 LTS
bluez —
linux —
linux-aws —
linux-azure —
linux-gcp —
linux-oracle —
linux-raspi —
linux-riscv —
linux-azure-fde —
linux-realtime —
linux-allwinner —
linux-allwinner-5.19 —
linux-aws-5.0 —
linux-aws-5.11 —
linux-aws-5.13 —
linux-aws-5.15 —
linux-aws-5.19 —
linux-aws-5.3 —
linux-aws-5.4 —
linux-aws-5.8 —
linux-aws-6.14 —
linux-aws-6.17 —
linux-aws-6.2 —
linux-aws-6.5 —
linux-aws-6.8 —
linux-aws-fips —
linux-aws-hwe —
linux-azure-4.15 —
linux-azure-5.11 —
linux-azure-5.13 —
linux-azure-5.15 —
linux-azure-5.19 —
linux-azure-5.3 —
linux-azure-5.4 —
linux-azure-5.8 —
linux-azure-6.11 —
linux-azure-6.14 —
linux-azure-6.17 —
linux-azure-6.2 —
linux-azure-6.5 —
linux-azure-6.8 —
linux-azure-edge —
linux-azure-fde-5.15 —
linux-azure-fde-5.19 —
linux-azure-fde-6.14 —
linux-azure-fde-6.17 —
linux-azure-fde-6.2 —
linux-azure-fde-6.8 —
linux-azure-fips —
linux-azure-nvidia —
linux-azure-nvidia-6.14 —
linux-bluefield —
linux-dell300x —
linux-fips —
linux-gcp-4.15 —
linux-gcp-5.11 —
linux-gcp-5.13 —
linux-gcp-5.15 —
linux-gcp-5.19 —
linux-gcp-5.3 —
linux-gcp-5.4 —
linux-gcp-5.8 —
linux-gcp-6.11 —
linux-gcp-6.14 —
linux-gcp-6.17 —
linux-gcp-6.2 —
linux-gcp-6.5 —
linux-gcp-6.8 —
linux-gcp-edge —
linux-gcp-fips —
linux-gke —
linux-gke-4.15 —
linux-gke-5.0 —
linux-gke-5.15 —
linux-gke-5.3 —
linux-gke-5.4 —
linux-gkeop —
linux-gkeop-5.15 —
linux-gkeop-5.4 —
linux-hwe —
linux-hwe-5.11 —
linux-hwe-5.13 —
linux-hwe-5.15 —
linux-hwe-5.19 —
linux-hwe-5.4 —
linux-hwe-5.8 —
linux-hwe-6.11 —
linux-hwe-6.14 —
linux-hwe-6.17 —
linux-hwe-6.2 —
linux-hwe-6.5 —
linux-hwe-6.8 —
linux-hwe-edge —
linux-ibm —
linux-ibm-5.15 —
linux-ibm-5.4 —
linux-ibm-6.8 —
linux-intel —
linux-intel-5.13 —
linux-intel-iot-realtime —
linux-intel-iotg —
linux-intel-iotg-5.15 —
linux-iot —
linux-kvm —
linux-laptop —
linux-lowlatency —
linux-lowlatency-hwe-5.15 —
linux-lowlatency-hwe-5.19 —
linux-lowlatency-hwe-6.11 —
linux-lowlatency-hwe-6.2 —
linux-lowlatency-hwe-6.5 —
linux-lowlatency-hwe-6.8 —
linux-lts-xenial —
linux-nvidia —
linux-nvidia-6.11 —
linux-nvidia-6.2 —
linux-nvidia-6.5 —
linux-nvidia-6.8 —
linux-nvidia-lowlatency —
linux-nvidia-tegra —
linux-nvidia-tegra-5.15 —
linux-nvidia-tegra-igx —
linux-oem —
linux-oem-5.10 —
linux-oem-5.14 —
linux-oem-5.17 —
linux-oem-5.6 —
linux-oem-6.0 —
linux-oem-6.1 —
linux-oem-6.11 —
linux-oem-6.14 —
linux-oem-6.17 —
linux-oem-6.5 —
linux-oem-6.8 —
linux-oem-osp1 —
linux-oracle-5.0 —
linux-oracle-5.11 —
linux-oracle-5.13 —
linux-oracle-5.15 —
linux-oracle-5.3 —
linux-oracle-5.4 —
linux-oracle-5.8 —
linux-oracle-6.14 —
linux-oracle-6.17 —
linux-oracle-6.5 —
linux-oracle-6.8 —
linux-raspi-5.4 —
linux-raspi-realtime —
linux-raspi2 —
linux-raspi2-5.3 —
linux-realtime-6.14 —
linux-realtime-6.17 —
linux-realtime-6.8 —
linux-riscv-5.11 —
linux-riscv-5.15 —
linux-riscv-5.19 —
linux-riscv-5.8 —
linux-riscv-6.14 —
linux-riscv-6.17 —
linux-riscv-6.5 —
linux-riscv-6.8 —
linux-snapdragon —
linux-starfive —
linux-starfive-5.19 —
linux-starfive-6.2 —
linux-starfive-6.5 —
linux-xilinx —
linux-xilinx-zynqmp —
Show all 168 packages Show less packages

CVE-2020-27153

Low priority

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant...

1 affected package

bluez

Package 26.04 LTS
bluez —
Show less packages

CVE-2020-15802

Medium priority

Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivation in Bluetooth Core Specification v4.2 and v5.0 may permit an unauthenticated user to establish a bonding...

169 affected packages

bluez, linux, linux-aws, linux-azure, linux-gcp...

Package 26.04 LTS
bluez —
linux —
linux-aws —
linux-azure —
linux-gcp —
linux-oracle —
linux-raspi —
linux-riscv —
linux-azure-fde —
linux-realtime —
linux-allwinner —
linux-allwinner-5.19 —
linux-aws-5.0 —
linux-aws-5.11 —
linux-aws-5.13 —
linux-aws-5.15 —
linux-aws-5.19 —
linux-aws-5.3 —
linux-aws-5.4 —
linux-aws-5.8 —
linux-aws-6.14 —
linux-aws-6.17 —
linux-aws-6.2 —
linux-aws-6.5 —
linux-aws-6.8 —
linux-aws-fips —
linux-aws-hwe —
linux-azure-4.15 —
linux-azure-5.11 —
linux-azure-5.13 —
linux-azure-5.15 —
linux-azure-5.19 —
linux-azure-5.3 —
linux-azure-5.4 —
linux-azure-5.8 —
linux-azure-6.11 —
linux-azure-6.14 —
linux-azure-6.17 —
linux-azure-6.2 —
linux-azure-6.5 —
linux-azure-6.8 —
linux-azure-edge —
linux-azure-fde-5.15 —
linux-azure-fde-5.19 —
linux-azure-fde-6.14 —
linux-azure-fde-6.17 —
linux-azure-fde-6.2 —
linux-azure-fde-6.8 —
linux-azure-fips —
linux-azure-nvidia —
linux-azure-nvidia-6.14 —
linux-bluefield —
linux-dell300x —
linux-fips —
linux-gcp-4.15 —
linux-gcp-5.11 —
linux-gcp-5.13 —
linux-gcp-5.15 —
linux-gcp-5.19 —
linux-gcp-5.3 —
linux-gcp-5.4 —
linux-gcp-5.8 —
linux-gcp-6.11 —
linux-gcp-6.14 —
linux-gcp-6.17 —
linux-gcp-6.2 —
linux-gcp-6.5 —
linux-gcp-6.8 —
linux-gcp-edge —
linux-gcp-fips —
linux-gke —
linux-gke-4.15 —
linux-gke-5.0 —
linux-gke-5.15 —
linux-gke-5.3 —
linux-gke-5.4 —
linux-gkeop —
linux-gkeop-5.15 —
linux-gkeop-5.4 —
linux-hwe —
linux-hwe-5.11 —
linux-hwe-5.13 —
linux-hwe-5.15 —
linux-hwe-5.19 —
linux-hwe-5.4 —
linux-hwe-5.8 —
linux-hwe-6.11 —
linux-hwe-6.14 —
linux-hwe-6.17 —
linux-hwe-6.2 —
linux-hwe-6.5 —
linux-hwe-6.8 —
linux-hwe-edge —
linux-ibm —
linux-ibm-5.15 —
linux-ibm-5.4 —
linux-ibm-6.8 —
linux-intel —
linux-intel-5.13 —
linux-intel-iot-realtime —
linux-intel-iotg —
linux-intel-iotg-5.15 —
linux-iot —
linux-kvm —
linux-laptop —
linux-lowlatency —
linux-lowlatency-hwe-5.15 —
linux-lowlatency-hwe-5.19 —
linux-lowlatency-hwe-6.11 —
linux-lowlatency-hwe-6.2 —
linux-lowlatency-hwe-6.5 —
linux-lowlatency-hwe-6.8 —
linux-lts-trusty —
linux-lts-xenial —
linux-nvidia —
linux-nvidia-6.11 —
linux-nvidia-6.2 —
linux-nvidia-6.5 —
linux-nvidia-6.8 —
linux-nvidia-lowlatency —
linux-nvidia-tegra —
linux-nvidia-tegra-5.15 —
linux-nvidia-tegra-igx —
linux-oem —
linux-oem-5.10 —
linux-oem-5.14 —
linux-oem-5.17 —
linux-oem-5.6 —
linux-oem-6.0 —
linux-oem-6.1 —
linux-oem-6.11 —
linux-oem-6.14 —
linux-oem-6.17 —
linux-oem-6.5 —
linux-oem-6.8 —
linux-oem-osp1 —
linux-oracle-5.0 —
linux-oracle-5.11 —
linux-oracle-5.13 —
linux-oracle-5.15 —
linux-oracle-5.3 —
linux-oracle-5.4 —
linux-oracle-5.8 —
linux-oracle-6.14 —
linux-oracle-6.17 —
linux-oracle-6.5 —
linux-oracle-6.8 —
linux-raspi-5.4 —
linux-raspi-realtime —
linux-raspi2 —
linux-raspi2-5.3 —
linux-realtime-6.14 —
linux-realtime-6.17 —
linux-realtime-6.8 —
linux-riscv-5.11 —
linux-riscv-5.15 —
linux-riscv-5.19 —
linux-riscv-5.8 —
linux-riscv-6.14 —
linux-riscv-6.17 —
linux-riscv-6.5 —
linux-riscv-6.8 —
linux-snapdragon —
linux-starfive —
linux-starfive-5.19 —
linux-starfive-6.2 —
linux-starfive-6.5 —
linux-xilinx —
linux-xilinx-zynqmp —
Show all 169 packages Show less packages

CVE-2020-10134

Medium priority
Vulnerable

Pairing in Bluetooth® Core v5.2 and earlier may permit an unauthenticated attacker to acquire credentials with two pairing devices via adjacent access when the unauthenticated user initiates different pairing methods in each peer...

1 affected package

bluez

Package 26.04 LTS
bluez Vulnerable
Show less packages

CVE-2020-9770

Low priority
Vulnerable

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4. An attacker in a privileged network position may be able to intercept Bluetooth traffic.

1 affected package

bluez

Package 26.04 LTS
bluez Vulnerable
Show less packages

CVE-2020-0556

Medium priority

Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access

1 affected package

bluez

Package 26.04 LTS
bluez —
Show less packages

CVE-2018-10910

Low priority

A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any...

2 affected packages

bluez, gnome-bluetooth

Package 26.04 LTS
bluez —
gnome-bluetooth —
Show less packages

CVE-2017-13220

Medium priority

An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053.

24 affected packages

bluez, linux, linux-aws, linux-azure, linux-euclid...

Package 26.04 LTS
bluez —
linux —
linux-aws —
linux-azure —
linux-euclid —
linux-flo —
linux-gcp —
linux-gke —
linux-goldfish —
linux-grouper —
linux-hwe —
linux-hwe-edge —
linux-kvm —
linux-lts-trusty —
linux-lts-utopic —
linux-lts-vivid —
linux-lts-wily —
linux-lts-xenial —
linux-maguro —
linux-mako —
linux-manta —
linux-oem —
linux-raspi2 —
linux-snapdragon —
Show all 24 packages Show less packages