CVE catalog

CVE-2020-0556

bluez: CVE-2020-0556

[CVE catalog]

Severity
High · CVSS 7.1CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
1.04% · Oct 25, 2026

Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianbluezsid5.87-5fixed
Debianbluezforky5.87-5fixed
Debianblueztrixie5.82-1.1fixed
Debianbluezbookworm5.66-1+deb12u2fixed
Debianbluezbookworm-security5.66-1+deb12u1fixed
Alpinebluez3.105.50-r4fixed
Alpinebluez3.115.52-r1fixed
Alpinebluez3.125.54-r0fixed
Alpinebluez3.135.54-r0fixed
Alpinebluez3.145.54-r0fixed
Alpinebluez3.155.54-r0fixed
Alpinebluez3.165.54-r0fixed
Alpinebluez3.175.54-r0fixed
Alpinebluez3.185.54-r0fixed
Alpinebluez3.195.54-r0fixed
Alpinebluez3.205.54-r0fixed
Alpinebluez3.215.54-r0fixed
Alpinebluez3.225.54-r0fixed
Alpinebluez3.235.54-r0fixed
Alpinebluez3.245.54-r0fixed
Alpinebluez3.85.49-r3fixed
Alpinebluez3.95.50-r1fixed
Ubuntubluez16.045.35-0ubuntu2vulnerable
Ubuntubluez16.045.36-0ubuntu1vulnerable
Ubuntubluez16.045.37-0ubuntu5vulnerable
Ubuntubluez16.045.37-0ubuntu5.1vulnerable
Ubuntubluez16.045.37-0ubuntu5.3fixed
Ubuntubluez18.045.46-0ubuntu3vulnerable
Ubuntubluez18.045.46-0ubuntu4vulnerable
Ubuntubluez18.045.48-0ubuntu3vulnerable
Ubuntubluez18.045.48-0ubuntu3.1vulnerable
Ubuntubluez18.045.48-0ubuntu3.2vulnerable
Ubuntubluez18.045.48-0ubuntu3.3vulnerable
Ubuntubluez18.045.48-0ubuntu3.4fixed
Opensusebluezleap 15.25.48-lp152.12.3.1fixed
Susebluezlinux enterprise module for basesystem 15 sp25.48-13.3.1fixed
Susebluezlinux enterprise module for desktop applications 15 sp25.48-13.3.1fixed
Susebluezlinux enterprise workstation extension 15 sp25.48-13.3.1fixed
Opensusebluezleap 15.15.48-lp151.8.12.1fixed
Susebluezlinux enterprise module for basesystem 15 sp15.48-5.25.1fixed
Susebluezlinux enterprise module for desktop applications 15 sp15.48-5.25.1fixed
Susebluezlinux enterprise workstation extension 15 sp15.48-5.25.1fixed
Susebluezhpe helion openstack 85.13-5.23.1fixed
Susebluezopenstack cloud 75.13-5.23.1fixed
Susebluezopenstack cloud 85.13-5.23.1fixed
Susebluezopenstack cloud 95.13-5.23.1fixed
Susebluezopenstack cloud crowbar 85.13-5.23.1fixed
Susebluezopenstack cloud crowbar 95.13-5.23.1fixed
Susebluezlinux enterprise server for sap applications 12 sp25.13-5.23.1fixed
Susebluezlinux enterprise server for sap applications 12 sp35.13-5.23.1fixed
Susebluezlinux enterprise server for sap applications 12 sp45.13-5.23.1fixed
Susebluezlinux enterprise software development kit 12 sp55.13-5.23.1fixed
Susebluezlinux enterprise server 12 sp2-ltss5.13-5.23.1fixed
Susebluezlinux enterprise server 12 sp2-bcl5.13-5.23.1fixed
Susebluezlinux enterprise server 12 sp3-ltss5.13-5.23.1fixed
Susebluezlinux enterprise server 12 sp3-bcl5.13-5.23.1fixed
Susebluezlinux enterprise server 12 sp4-ltss5.13-5.23.1fixed
Susebluezlinux enterprise server 12 sp55.13-5.23.1fixed
Susebluezlinux enterprise server for sap applications 12 sp55.13-5.23.1fixed
Susebluezlinux enterprise workstation extension 12 sp55.13-5.23.1fixed
Susebluezenterprise storage 55.13-5.23.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianbluezsourcesid5.50-1.1not yet assignedNot reported[953770]
Debianbluezsourceforky5.50-1.1not yet assignedNot reported[953770]
Debianbluezsourcetrixie5.50-1.1not yet assignedNot reported[953770]
Debianbluezsourcebookworm5.50-1.1not yet assignedNot reported[953770]
Alpinebluezapk3.105.50-r4Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.115.52-r1Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.125.54-r0Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.135.54-r0Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.145.54-r0Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.155.54-r0Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.165.54-r0Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.175.54-r0Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.185.54-r0Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.195.54-r0Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.205.54-r0Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.215.54-r0Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.225.54-r0Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.235.54-r0Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.245.54-r0Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.85.49-r3Not reportedALPINE-CVE-2020-0556Not reported
Alpinebluezapk3.95.50-r1Not reportedALPINE-CVE-2020-0556Not reported
Ubuntubluezdeb16.045.37-0ubuntu5.3Not reportedUBUNTU-CVE-2020-0556Not reported
Ubuntubluezdeb18.045.48-0ubuntu3.4Not reportedUBUNTU-CVE-2020-0556Not reported
Opensusebluezrpmleap 15.25.48-lp152.12.3.1Not reportedOPENSUSE-SU-2020:0872-1Not reported
Susebluezrpmlinux enterprise module for basesystem 15 sp25.48-13.3.1Not reportedSUSE-SU-2020:3034-1Not reported
Susebluezrpmlinux enterprise module for desktop applications 15 sp25.48-13.3.1Not reportedSUSE-SU-2020:3034-1Not reported
Susebluezrpmlinux enterprise workstation extension 15 sp25.48-13.3.1Not reportedSUSE-SU-2020:3034-1Not reported
Opensusebluezrpmleap 15.15.48-lp151.8.12.1Not reportedOPENSUSE-SU-2020:0479-1Not reported
Susebluezrpmlinux enterprise module for basesystem 15 sp15.48-5.25.1Not reportedSUSE-SU-2020:0918-1Not reported
Susebluezrpmlinux enterprise module for desktop applications 15 sp15.48-5.25.1Not reportedSUSE-SU-2020:0918-1Not reported
Susebluezrpmlinux enterprise workstation extension 15 sp15.48-5.25.1Not reportedSUSE-SU-2020:0918-1Not reported
Susebluezrpmhpe helion openstack 85.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmopenstack cloud 75.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmopenstack cloud 85.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmopenstack cloud 95.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmopenstack cloud crowbar 85.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmopenstack cloud crowbar 95.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmlinux enterprise server for sap applications 12 sp25.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmlinux enterprise server for sap applications 12 sp35.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmlinux enterprise server for sap applications 12 sp45.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmlinux enterprise software development kit 12 sp55.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmlinux enterprise server 12 sp2-ltss5.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmlinux enterprise server 12 sp2-bcl5.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmlinux enterprise server 12 sp3-ltss5.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmlinux enterprise server 12 sp3-bcl5.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmlinux enterprise server 12 sp4-ltss5.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmlinux enterprise server 12 sp55.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmlinux enterprise server for sap applications 12 sp55.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmlinux enterprise workstation extension 12 sp55.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported
Susebluezrpmenterprise storage 55.13-5.23.1Not reportedSUSE-SU-2020:3516-1Not reported

[Debian bug #953770]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [bluetooth]Fixed

    Source package: [bluez]

    Details (4)
    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • [bluez]Fixed
    Details (4)
    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • [bluez-cups]Fixed

    Source package: [bluez]

    Details (4)
    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • Source package: [bluez]

    Details (4)
    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • Source package: [bluez]

    Details (4)
    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • Source package: [bluez]

    Details (4)
    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • Source package: [bluez]

    Details (4)
    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • Source package: [bluez]

    Details (4)
    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · all · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • Source package: [bluez]

    Details (4)
    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • Source package: [bluez]

    Details (4)
    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

  • Source package: [bluez]

    Details (4)
    • 5.66-1+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

    • 5.66-1+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · bookworm; dsa · bluez · debian · 12

[Debian 13 (Trixie)]

  • [bluetooth]Fixed

    Source package: [bluez]

    Details (2)
    • 5.82-1.1 · all · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

    • 5.82-1.1 · all · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

  • [bluez]Fixed
    Details (2)
    • 5.82-1.1 · amd64 · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

    • 5.82-1.1 · arm64 · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

  • [bluez-cups]Fixed

    Source package: [bluez]

    Details (2)
    • 5.82-1.1 · amd64 · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

    • 5.82-1.1 · arm64 · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

  • Source package: [bluez]

    Details (2)
    • 5.82-1.1 · amd64 · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

    • 5.82-1.1 · arm64 · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

  • Source package: [bluez]

    Details (2)
    • 5.82-1.1 · amd64 · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

    • 5.82-1.1 · arm64 · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

  • Source package: [bluez]

    Details (2)
    • 5.82-1.1 · amd64 · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

    • 5.82-1.1 · arm64 · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

  • Source package: [bluez]

    Details (2)
    • 5.82-1.1 · all · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

    • 5.82-1.1 · all · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

  • Source package: [bluez]

    Details (2)
    • 5.82-1.1 · all · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

    • 5.82-1.1 · all · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

  • Source package: [bluez]

    Details (2)
    • 5.82-1.1 · amd64 · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

    • 5.82-1.1 · arm64 · trixie

      Fixed · Fixed: 5.50-1.1

      dsa · bluez · debian · 13

Next results

Observed:

References