NVD Vulnerability Detail

CVE-2020-0556

Summary	Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access
Publication Date	March 13, 2020, 6:15 a.m.
Registration Date	Jan. 26, 2021, 11:49 a.m.
Last Update	Nov. 21, 2024, 1:53 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:bluez:bluez::::::::					5.54

Configuration2	or higher	or less	more than	less than
cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:19.10:::::::*

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00008.html	Mailing List Third Party Advisory
2	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00055.html	Mailing List Third Party Advisory
3	https://lists.debian.org/debian-lts-announce/2020/06/msg00008.html	Mailing List Third Party Advisory
4	https://security.gentoo.org/glsa/202003-49	Third Party Advisory
5	https://usn.ubuntu.com/4311-1/	Third Party Advisory
6	https://www.debian.org/security/2020/dsa-4647	Third Party Advisory
7	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00352.html	Patch Third Party Advisory
8	http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00008.html	Mailing List Third Party Advisory
9	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00352.html	Patch Third Party Advisory
10	https://www.debian.org/security/2020/dsa-4647	Third Party Advisory
11	https://usn.ubuntu.com/4311-1/	Third Party Advisory
12	https://security.gentoo.org/glsa/202003-49	Third Party Advisory
13	https://lists.debian.org/debian-lts-announce/2020/06/msg00008.html	Mailing List Third Party Advisory
14	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00055.html	Mailing List Third Party Advisory

Common Vulnerabilities List

JVN Vulnerability Information

BlueZ における権限管理に関する脆弱性

Title	BlueZ における権限管理に関する脆弱性
Summary	BlueZ には、権限管理に関する脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	March 10, 2020, midnight
Registration Date	March 27, 2020, 4:58 p.m.
Last Update	March 27, 2020, 4:58 p.m.

Affected System

BlueZ Project

BlueZ 5.54 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2020-0556	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0556
National Vulnerability Database (NVD)
2	CVE-2020-0556	https://nvd.nist.gov/vuln/detail/CVE-2020-0556

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-269	https://cwe.mitre.org/data/definitions/269.html

ベンダー情報

No	Name	URL
BlueZ
1	Top Page	http://www.bluez.org/

その他

No	Name	URL
関連文書
1	INTEL-SA-00352 (BlueZ Advisory)	https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00352.html

Change Log

No	Changed Details	Date of change
1	[2020年03月27日] 掲載	March 27, 2020, 4:58 p.m.