CVE-2020-12351

Severity CVSS v4.0:
Pending analysis
Type:
CWE-20 Input Validation
Publication date:
23/11/2020
Last modified:
28/09/2023

Description

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.7.7 (including) 4.9.240 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.10 (including) 4.14.202 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.15 (including) 4.19.152 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 5.4.72 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.8.16 (excluding)
cpe:2.3:o:linux:linux_kernel:5.9.0:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.9.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.9.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.9.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.9.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.9.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.9.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.9.1:*:*:*:*:*:*:*