In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_version": "5.37-0ubuntu5.3+esm1", "binary_name": "bluetooth" }, { "binary_version": "5.37-0ubuntu5.3+esm1", "binary_name": "bluez" }, { "binary_version": "5.37-0ubuntu5.3+esm1", "binary_name": "bluez-cups" }, { "binary_version": "5.37-0ubuntu5.3+esm1", "binary_name": "bluez-hcidump" }, { "binary_version": "5.37-0ubuntu5.3+esm1", "binary_name": "bluez-obexd" }, { "binary_version": "5.37-0ubuntu5.3+esm1", "binary_name": "bluez-tests" }, { "binary_version": "5.37-0ubuntu5.3+esm1", "binary_name": "libbluetooth-dev" }, { "binary_version": "5.37-0ubuntu5.3+esm1", "binary_name": "libbluetooth3" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "5.48-0ubuntu3.5", "binary_name": "bluetooth" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "bluez" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "bluez-cups" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "bluez-hcidump" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "bluez-obexd" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "bluez-tests" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "libbluetooth-dev" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "libbluetooth3" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "5.53-0ubuntu3.2", "binary_name": "bluetooth" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "bluez" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "bluez-cups" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "bluez-hcidump" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "bluez-obexd" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "bluez-tests" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "libbluetooth-dev" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "libbluetooth3" } ] }