Vulnerabilities > CVE-2020-27153 - Double Free vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

NVD

Published: 2020-10-15

Updated: 2022-04-05

Summary

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.

Vulnerable Configurations

Part	Description	Count
Application	Bluez Bluez Bluez - Bluez Bluez 4.0 Bluez Bluez 4.1 Bluez Bluez 4.2 Bluez Bluez 4.3 Bluez Bluez 4.4 Bluez Bluez 4.5 Bluez Bluez 4.6 Bluez Bluez 4.7 Bluez Bluez 4.8 Bluez Bluez 4.9 Bluez Bluez 4.10 Bluez Bluez 4.11 Bluez Bluez 4.12 Bluez Bluez 4.13 Bluez Bluez 4.14 Bluez Bluez 4.15 Bluez Bluez 4.16 Bluez Bluez 4.17 Bluez Bluez 4.18 Bluez Bluez 4.19 Bluez Bluez 4.20 Bluez Bluez 4.21 Bluez Bluez 4.22 Bluez Bluez 4.23 Bluez Bluez 4.24 Bluez Bluez 4.25 Bluez Bluez 4.26 Bluez Bluez 4.27 Bluez Bluez 4.28 Bluez Bluez 4.29 Bluez Bluez 4.30 Bluez Bluez 4.31 Bluez Bluez 4.32 Bluez Bluez 4.33 Bluez Bluez 4.34 Bluez Bluez 4.35 Bluez Bluez 4.36 Bluez Bluez 4.37 Bluez Bluez 4.38 Bluez Bluez 4.39 Bluez Bluez 4.40 Bluez Bluez 4.41 Bluez Bluez 4.42 Bluez Bluez 4.43 Bluez Bluez 4.44 Bluez Bluez 4.45 Bluez Bluez 4.46 Bluez Bluez 4.47 Bluez Bluez 4.48 Bluez Bluez 4.49 Bluez Bluez 4.50 Bluez Bluez 4.51 Bluez Bluez 4.52 Bluez Bluez 4.53 Bluez Bluez 4.54 Bluez Bluez 4.55 Bluez Bluez 4.56 Bluez Bluez 4.57 Bluez Bluez 4.58 Bluez Bluez 4.59 Bluez Bluez 4.60 Bluez Bluez 4.61 Bluez Bluez 4.62 Bluez Bluez 4.63 Bluez Bluez 4.64 Bluez Bluez 4.65 Bluez Bluez 4.66 Bluez Bluez 4.67 Bluez Bluez 4.68 Bluez Bluez 4.69 Bluez Bluez 4.70 Bluez Bluez 4.71 Bluez Bluez 4.72 Bluez Bluez 4.73 Bluez Bluez 4.74 Bluez Bluez 4.75 Bluez Bluez 4.76 Bluez Bluez 4.77 Bluez Bluez 4.78 Bluez Bluez 4.79 Bluez Bluez 4.80 Bluez Bluez 4.81 Bluez Bluez 4.82 Bluez Bluez 4.83 Bluez Bluez 4.84 Bluez Bluez 4.85 Bluez Bluez 4.86 Bluez Bluez 4.87 Bluez Bluez 4.88 Bluez Bluez 4.89 Bluez Bluez 4.90 Bluez Bluez 4.91 Bluez Bluez 4.92 Bluez Bluez 4.93 Bluez Bluez 4.94 Bluez Bluez 4.95 Bluez Bluez 4.96 Bluez Bluez 4.97 Bluez Bluez 4.98 Bluez Bluez 4.99 Bluez Bluez 4.100 Bluez Bluez 4.101 Bluez Bluez 5.0 Bluez Bluez 5.1 Bluez Bluez 5.2 Bluez Bluez 5.3 Bluez Bluez 5.4 Bluez Bluez 5.5 Bluez Bluez 5.6 Bluez Bluez 5.7 Bluez Bluez 5.8 Bluez Bluez 5.9 Bluez Bluez 5.10 Bluez Bluez 5.11 Bluez Bluez 5.12 Bluez Bluez 5.13 Bluez Bluez 5.14 Bluez Bluez 5.15 Bluez Bluez 5.16 Bluez Bluez 5.17 Bluez Bluez 5.18 Bluez Bluez 5.19 Bluez Bluez 5.20 Bluez Bluez 5.21 Bluez Bluez 5.22 Bluez Bluez 5.23 Bluez Bluez 5.24 Bluez Bluez 5.25 Bluez Bluez 5.26 Bluez Bluez 5.27 Bluez Bluez 5.28 Bluez Bluez 5.29 Bluez Bluez 5.30 Bluez Bluez 5.31 Bluez Bluez 5.32 Bluez Bluez 5.33 Bluez Bluez 5.34 Bluez Bluez 5.35 Bluez Bluez 5.36 Bluez Bluez 5.37 Bluez Bluez 5.38 Bluez Bluez 5.39 Bluez Bluez 5.40 Bluez Bluez 5.41 Bluez Bluez 5.42 Bluez Bluez 5.43 Bluez Bluez 5.44 Bluez Bluez 5.45 Bluez Bluez 5.46 Bluez Bluez 5.47 Bluez Bluez 5.48 Bluez Bluez 5.49 Bluez Bluez 5.50 Bluez Bluez 5.51 Bluez Bluez 5.52 Bluez Bluez 5.53 Bluez Bluez 5.54	158
OS	Debian Debian Debian Linux 9.0 Debian Debian Linux 10.0	2
OS	Opensuse Opensuse Leap 15.1 Opensuse Leap 15.2	2

Common Weakness Enumeration (CWE)

CWE-415 - Double Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References