[ GLSA 202011-01 ] BlueZ

[GLSA]

Gentoo Linux Security Advisory

Title: BlueZ: Arbitrary code execution (GLSA 202011-01)
Severity: normal
Exploitable: remote
Date: 2020-11-03
Bug(s): #749285
ID: 202011-01

Synopsis

A vulnerability in BlueZ might allow remote attackers to execute
arbitrary code.


Background

Set of tools to manage Bluetooth devices for Linux.

Affected Packages

Package: net-wireless/bluez
Vulnerable: < 5.55
Unaffected: >= 5.55
Architectures: All supported architectures


Description

It was discovered that there was a double-free vulnerability in Bluez
after the service discovery which occurs after a Bluetoth Low Energy
(BLE) connection has been established to a device.


Impact

A remote attacker, by enticing a user to connect to a malicious GATT
server or device, could cause the execution of arbitrary code with the
privileges of the user running gatttool client or cause a Denial of
Service condition.


Workaround

There is no known workaround at this time.

Resolution

All BlueZ users should upgrade to the latest version: