Bug 1814293 (CVE-2020-0556) - CVE-2020-0556 bluez: Improper access control in subsystem could result in privilege escalation and DoS
Summary: CVE-2020-0556 bluez: Improper access control in subsystem could result in pri...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2020-0556
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1814294 1827028 1827029
Blocks: 1814297
TreeView+ depends on / blocked
 
Reported: 2020-03-17 15:05 UTC by Michael Kaplan
Modified: 2021-02-16 20:27 UTC (History)
7 users (show)

Fixed In Version: bluez 5.54
Clone Of:
Environment:
Last Closed: 2020-09-29 22:00:09 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2020:4001 0 None None None 2020-09-29 20:29:25 UTC
Red Hat Product Errata RHSA-2020:4481 0 None None None 2020-11-04 01:21:49 UTC

Description Michael Kaplan 2020-03-17 15:05:02 UTC 
Improper access control in subsystem could allow unauthenticated user to enable escalation of privilege and denial of service via adjacent access.

Upstream Reference:

https://patchwork.kernel.org/patch/11428317/

Upstream Reference:

https://patchwork.kernel.org/patch/11428319/
Comment 1 Michael Kaplan 2020-03-17 15:05:34 UTC 
Created bluez tracking bugs for this issue:

Affects: fedora-all [bug 1814294]
Comment 2 Michael Kaplan 2020-03-17 15:09:04 UTC 
External References:

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00352.html
Comment 5 Huzaifa S. Sidhpurwala 2020-04-23 05:13:03 UTC 
Upstream patches:
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?h=5.54&id=3cccdbab2324086588df4ccf5f892fb3ce1f1787
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?h=5.54&id=8cdbd3b09f29da29374e2f83369df24228da0ad1
Comment 9 Huzaifa S. Sidhpurwala 2020-05-08 03:44:48 UTC 
Mitigation:

Disable Bluetooth.  Instructions on disabling bluetooth in Red Hat Enterprise Linux are available at: https://access.redhat.com/solutions/2682931
Comment 10 errata-xmlrpc 2020-09-29 20:29:23 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2020:4001 https://access.redhat.com/errata/RHSA-2020:4001
Comment 11 Product Security DevOps Team 2020-09-29 22:00:09 UTC 
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2020-0556
Comment 12 errata-xmlrpc 2020-11-04 01:21:47 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2020:4481 https://access.redhat.com/errata/RHSA-2020:4481
Note You need to log in before you can comment on or make changes to this bug.