USN-4605-2
blueman vulnerability
Vaisha Bernard discovered that blueman did not properly sanitize input on the d-bus interface to blueman-mechanism. A local attacker could possibly use this issue to escalate privileges and run arbitrary code or cause a denial of service. (CVE-2020-15238)
While a previous security update fixed the issue, this update provides additional improvements by enabling PolicyKit authentication for privileged commands.
What each source reports
OSV No score
blueman vulnerability
Vaisha Bernard discovered that blueman did not properly sanitize input on the d-bus interface to blueman-mechanism. A local attacker could possibly use this issue to escalate privileges and run arbitrary code or cause a denial of service. (CVE-2020-15238)
While a previous security update fixed the issue, this update provides additional improvements by enabling PolicyKit authentication for privileged commands.
- Record
USN-4605-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bluemanUbuntu:20.04:LTS |
before 2.1.2-1ubuntu0.2, plus listed versions 2.0.8-1ubuntu12.1.1-12.1.2-12.1.2-1ubuntu0.1 |
2.1.2-1ubuntu0.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4605-2 is a vulnerability with no CVSS score yet in blueman, published November 3, 2020. No source lists public exploit code. Fixed in blueman 2.1.2-1ubuntu0.2.