It was discovered that BlueZ incorrectly checked certain permissions when pairing. A local attacker could possibly use this issue to impersonate devices. (CVE-2020-26558)
Jay LV discovered that BlueZ incorrectly handled redundant disconnect MGMT events. A local attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-27153)
Ziming Zhang discovered that BlueZ incorrectly handled certain array indexes. A local attacker could use this issue to cause BlueZ to crash, resulting in a denial of service, or possibly obtain sensitive information. This issue only affected Ubuntu 20.04 LTS and Ubuntu 20.10. (CVE-2021-3588)
{ "availability": "No subscription required", "binaries": [ { "binary_version": "5.48-0ubuntu3.5", "binary_name": "bluetooth" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "bluez" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "bluez-cups" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "bluez-dbg" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "bluez-hcidump" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "bluez-obexd" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "bluez-tests" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "libbluetooth-dev" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "libbluetooth3" }, { "binary_version": "5.48-0ubuntu3.5", "binary_name": "libbluetooth3-dbg" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "5.53-0ubuntu3.2", "binary_name": "bluetooth" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "bluez" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "bluez-cups" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "bluez-dbg" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "bluez-hcidump" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "bluez-obexd" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "bluez-tests" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "libbluetooth-dev" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "libbluetooth3" }, { "binary_version": "5.53-0ubuntu3.2", "binary_name": "libbluetooth3-dbg" } ] }