{"id":"CVE-2020-0556","aliases":["ALPINE-CVE-2020-0556","BELL-CVE-2020-0556","DEBIAN-CVE-2020-0556","DLA-2240-1","DSA-4647-1","EUVD-2020-2054","GHSA-xjj6-3w9q-h5xv","MGASA-2020-0152","RHSA-2020:4001","RHSA-2020:4481","SUSE-SU-2020:0918-1","SUSE-SU-2020:3034-1","SUSE-SU-2020:3516-1","UBUNTU-CVE-2020-0556","USN-4311-1","openSUSE-SU-2020:0479-1","openSUSE-SU-2020:0872-1","openSUSE-SU-2024:10657-1"],"status":"published","title":"Improper access control in subsystem for BlueZ before version 5.53 may allow an unauthenticated...","description":"Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01042,"percentile":0.64309,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-269"],"published":"2020-03-12T20:47:26Z","modified":"2026-11-03T06:32:35Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"bluez","fixed_in":["5.50-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"bluez","fixed_in":["5.52-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"bluez","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"bluez","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"bluez","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"bluez","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"bluez","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"bluez","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"bluez","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"bluez","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"bluez","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"bluez","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"bluez","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"bluez","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"bluez","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"bluez","fixed_in":["5.49-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"bluez","fixed_in":["5.50-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"obexd-enhanced","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"obexd-enhanced","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"obexd-enhanced","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"obexd-enhanced","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"obexd-enhanced","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"obexd-enhanced","fixed_in":["5.54-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"bluez","fixed_in":["5.50-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bluez","fixed_in":["5.50-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bluez","fixed_in":["5.50-1.1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"bluez","fixed_in":["5.43-2+deb9u2~deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"bluez","fixed_in":["5.43-2+deb9u2"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"bluez","fixed_in":["5.50-1.2~deb10u1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bluez","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bluez-debuginfo","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bluez-libs","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bluez-cups","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bluez-hid2hci","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"bluez-libs-devel","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bluez","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bluez-debuginfo","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bluez-libs","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bluez-cups","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bluez-hid2hci","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bluez-libs-devel","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bluez","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bluez-debuginfo","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bluez-libs","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bluez-cups","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bluez-hid2hci","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"bluez-libs-devel","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bluez","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bluez-debuginfo","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bluez-libs","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bluez-cups","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bluez-hid2hci","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bluez-libs-devel","fixed_in":["0:5.44-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-cups","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-cups-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-debugsource","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-hid2hci-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-libs-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-obexd-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-cups-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-debugsource","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-hid2hci","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-hid2hci-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-libs","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-libs-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-obexd","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-obexd-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-cups-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-debugsource","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-hid2hci-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-libs-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-libs-devel","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-obexd-debuginfo","fixed_in":["0:5.50-4.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"bluez","fixed_in":["5.48-5.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"bluez","fixed_in":["5.48-5.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP1","package":"bluez","fixed_in":["5.48-5.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"bluez","fixed_in":["5.13-5.23.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"bluez","fixed_in":["5.37-0ubuntu5.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"bluez","fixed_in":["5.48-0ubuntu3.4"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"bluez","fixed_in":["5.48-lp151.8.12.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"bluez","fixed_in":["5.48-lp152.12.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.50-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.52-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.49-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.50-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"obexd-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"obexd-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"obexd-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"obexd-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"obexd-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"obexd-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.50-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.50-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.50-1.1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.43-2+deb9u2~deb8u1"}]}],"versions":["5.23-2","5.23-2+deb8u1","5.33-1","5.36-1","5.40-1~exp0","5.41-1","5.43-1","5.43-2"]},{"source":"osv","ecosystem":"Debian:9","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.43-2+deb9u2"}]}],"versions":["5.43-2","5.43-2+deb9u1","5.43-2+deb9u2~deb8u1"]},{"source":"osv","ecosystem":"Debian:10","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.50-1.2~deb10u1"}]}],"versions":["5.50-1","5.50-1.1"]},{"source":"osv","ecosystem":"Mageia:7","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.54-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bluez-hid2hci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bluez-hid2hci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bluez-hid2hci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bluez-hid2hci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.44-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-hid2hci","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-obexd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-cups-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-hid2hci-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bluez-obexd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.50-4.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-5.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-5.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP1","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-5.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-13.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-13.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-13.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.13-5.23.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-0ubuntu5.3"}]}],"versions":["5.35-0ubuntu2","5.36-0ubuntu1","5.37-0ubuntu5","5.37-0ubuntu5.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-0ubuntu3.4"}]}],"versions":["5.46-0ubuntu3","5.46-0ubuntu4","5.48-0ubuntu3","5.48-0ubuntu3.1","5.48-0ubuntu3.2","5.48-0ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-0ubuntu5.3"}]}],"versions":["5.35-0ubuntu2","5.36-0ubuntu1","5.37-0ubuntu5","5.37-0ubuntu5.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-0ubuntu3.4"}]}],"versions":["5.46-0ubuntu3","5.46-0ubuntu4","5.48-0ubuntu3","5.48-0ubuntu3.1","5.48-0ubuntu3.2","5.48-0ubuntu3.3"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-lp151.8.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"bluez","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.48-lp152.12.3.1"}]}]}],"products":[{"vendor":"bluez","product":"bluez"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"intel","product":"bluez"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00352.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","article","report"]},{"url":"https://security.gentoo.org/glsa/202003-49","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4647","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://usn.ubuntu.com/4311-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00008.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/06/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00055.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-0556","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xjj6-3w9q-h5xv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-0556","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-0556","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-0556","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0152.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25969","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2020/03/12/4","tags":["web","report"]},{"url":"https://www.openwall.com/lists/oss-security/2020/03/13/2","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1101","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4001","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1814293","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4001.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-0556","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-0556","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4481","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4481.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200918-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1166751","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-0556","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203034-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1177895","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27153","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203516-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-0556","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4311-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-7837","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WEBIYTTPN5SC3I7XNKFVKXTJO4HY7VAK/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FH5J3K5JJQI5P652QACFCNPXGJ2FWZ3A/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9804","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-0556","description":"Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access","status":"published","published":"2020-03-12T20:47:26Z","modified":"2024-08-04T06:02:52.334Z","updated_at":"2026-11-02T14:35:59.434367Z"}],"euvd":[{"id":"EUVD-2020-2054","description":"Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access","status":"published","published":"2020-03-12T20:47:26Z","modified":"2024-08-04T06:02:52Z","updated_at":"2026-11-03T03:08:19.102243Z"}],"ghsa":[{"id":"GHSA-xjj6-3w9q-h5xv","title":"Improper access control in subsystem for BlueZ before version 5.53 may allow an unauthenticated...","description":"Improper access control in subsystem for BlueZ before version 5.53 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access.","status":"published","published":"2022-05-24T17:10:52Z","modified":"2023-01-29T05:01:57Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:44:57.255255Z"}],"nvd":[{"id":"CVE-2020-0556","description":"Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access","status":"published","published":"2020-03-12T21:15:14.157Z","modified":"2026-06-17T02:46:03.657Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:05:55.32877Z"}],"osv":[{"id":"ALPINE-CVE-2020-0556","description":"Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access","status":"published","published":"2020-03-12T21:15:14.157Z","modified":"2026-11-03T06:32:35.876250552Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"BELL-CVE-2020-0556","title":"CVE-2020-0556 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:16.324832Z","modified":"2026-01-26T09:48:13.34631Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2020-0556","description":"Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access","status":"published","published":"2020-03-12T21:15:14.157Z","modified":"2026-10-24T10:31:01.698946848Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:44:13.492058Z"},{"id":"DEBIAN-CVE-2020-0556","description":"Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access","status":"published","published":"2020-03-12T21:15:14.157Z","modified":"2026-10-26T12:00:06.441492744Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"RHSA-2020:4001","title":"Red Hat Security Advisory: bluez security update","status":"published","published":"2024-09-16T04:05:13Z","modified":"2026-06-27T10:11:24Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4481","title":"Red Hat Security Advisory: bluez security update","status":"published","published":"2024-09-16T04:05:20Z","modified":"2026-06-27T10:12:03Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2020-0556","description":"Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access","status":"published","published":"2020-03-12T21:15:00Z","modified":"2026-04-22T12:25:22.402749Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"DLA-2240-1","title":"bluez - security update","status":"published","published":"2020-06-09T00:00:00Z","modified":"2026-03-09T01:19:59.184159Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4647-1","title":"bluez - security update","status":"published","published":"2020-03-26T00:00:00Z","modified":"2026-03-09T02:09:43.931506Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2020-0152","title":"Updated bluez packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\n\nA bug in Bluez may allow for the Bluetooth Discoverable state being\nset to on when no Bluetooth agent is registered with the system. This\nsituation could lead to the unauthorized pairing of certain Bluetooth\ndevices without any form of authentication. Versions before bluez 5.51\nare vulnerable. (CVE-2018-10910)\n\nImproper access control in subsystem for BlueZ before version 5.54 may\nallow an unauthenticated user to potentially enable escalation of\nprivilege and denial of service via adjacent access. (CVE-2020-0556)\n","status":"published","published":"2020-04-02T22:48:49Z","modified":"2026-04-16T04:43:35.806450814Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0479-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2020-0556: Fixed an improper access control which could have allowed an unauthenticated \n  user to potentially enable escalation of privilege and denial of service (bsc#1166751).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-04-08T16:17:57Z","modified":"2026-02-04T03:49:29.79872Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0872-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2020-0556: Fixed an improper access control which could have allowed an unauthenticated \n  user to potentially enable escalation of privilege and denial of service (bsc#1166751).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-06-26T14:20:41Z","modified":"2026-02-04T04:40:47.777874Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10657-1","title":"bluez-5.61-1.5 on GA media","description":"These are all security issues fixed in the bluez-5.61-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:18:13.419996Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:0918-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2020-0556: Fixed an improper access control which could have allowed an unauthenticated \n  user to potentially enable escalation of privilege and denial of service (bsc#1166751).\n","status":"published","published":"2020-04-03T13:10:40Z","modified":"2026-02-04T02:21:00.594585Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:3034-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2020-27153: Fixed crash on disconnect (bsc#1177895).\n- CVE-2020-0556: Fixed potential escalation of privilege and denial of service via adjacent access, caused by improper access control (bsc#1166751).\n","status":"published","published":"2020-10-26T10:38:45Z","modified":"2026-02-04T04:04:28.018509Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3516-1","title":"Security update for bluez","description":"This update for bluez fixes the following issues:\n\n- CVE-2020-0556: Fixed improper access control which may lead to escalation of privilege and denial of service by an unauthenticated user (bsc#1166751).\n","status":"published","published":"2020-11-25T12:16:05Z","modified":"2026-02-04T02:12:59.3386Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-4311-1","title":"bluez vulnerabilities","description":"It was discovered that BlueZ incorrectly handled bonding HID and HOGP\ndevices. A local attacker could possibly use this issue to impersonate\nnon-bonded devices. (CVE-2020-0556)\n\nIt was discovered that BlueZ incorrectly handled certain commands. A local\nattacker could use this issue to cause BlueZ to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 16.04 LTS. (CVE-2016-7837)\n","status":"published","published":"2020-03-30T17:49:16Z","modified":"2026-04-22T10:03:34.463182Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}