FlawAtlas
Search the atlas
UBUNTU-CVE-2020-27153 High

UBUNTU-CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.

Exploit probability Not scored
Published October 15, 2020
Required by Not available
Last source change April 27, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:18.04:LTS bluez

7 explicit affected versions

Ubuntu:20.04:LTS bluez

9 explicit affected versions

Ubuntu:Pro:16.04:LTS bluez

5 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities UBUNTU-CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.

View original source

05 / REFERENCES

Further evidence