Joined: 12 May 2004
|Posted: Wed Mar 25, 2020 4:26 pm Post subject: [ GLSA 202003-49 ] BlueZ
|Gentoo Linux Security Advisory
Title: BlueZ: Security bypass (GLSA 202003-49)
A vulnerability in BlueZ might allow remote attackers to bypass
Set of tools to manage Bluetooth devices for Linux.
Vulnerable: < 5.54
Unaffected: >= 5.54
Architectures: All supported architectures
It was discovered that the HID and HOGP profiles implementations in
BlueZ did not specifically require bonding between the device and the
A remote attacker with adjacent access could impersonate an existing HID
device, cause a Denial of Service condition or escalate privileges.
There is no known workaround at this time.
All BlueZ users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=net-wireless/bluez-5.54"