ID

VAR-202105-0146


CVE

CVE-2020-26558


TITLE

Bluetooth Core Specification Authorization problem vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-202105-1503

DESCRIPTION

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202209-16 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: BlueZ: Multiple Vulnerabilities Date: September 29, 2022 Bugs: #797712, #835077 ID: 202209-16 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been discovered in BlueZ, the worst of which could result in arbitrary code execution. Background ========== BlueZ is the canonical bluetooth tools and system daemons package for Linux. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-wireless/bluez < 5.63 >= 5.63 Description =========== Multiple vulnerabilities have been discovered in BlueZ. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All BlueZ users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=net-wireless/bluez-5.63" References ========== [ 1 ] CVE-2020-26558 https://nvd.nist.gov/vuln/detail/CVE-2020-26558 [ 2 ] CVE-2021-0129 https://nvd.nist.gov/vuln/detail/CVE-2021-0129 [ 3 ] CVE-2021-3588 https://nvd.nist.gov/vuln/detail/CVE-2021-3588 [ 4 ] CVE-2022-0204 https://nvd.nist.gov/vuln/detail/CVE-2022-0204 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202209-16 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2022 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: bluez security update Advisory ID: RHSA-2021:4432-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:4432 Issue date: 2021-11-09 CVE Names: CVE-2020-26558 ==================================================================== 1. Summary: An update for bluez is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux BaseOS (v. 8) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux CRB (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (Red Hat), and pcmcia configuration files. Security Fix(es): * bluez: Passkey Entry protocol of the Bluetooth Core is vulnerable to an impersonation attack (CVE-2020-26558) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Package List: Red Hat Enterprise Linux AppStream (v. 8): aarch64: bluez-cups-5.56-1.el8.aarch64.rpm bluez-cups-debuginfo-5.56-1.el8.aarch64.rpm bluez-debuginfo-5.56-1.el8.aarch64.rpm bluez-debugsource-5.56-1.el8.aarch64.rpm bluez-hid2hci-debuginfo-5.56-1.el8.aarch64.rpm bluez-libs-debuginfo-5.56-1.el8.aarch64.rpm bluez-obexd-debuginfo-5.56-1.el8.aarch64.rpm ppc64le: bluez-cups-5.56-1.el8.ppc64le.rpm bluez-cups-debuginfo-5.56-1.el8.ppc64le.rpm bluez-debuginfo-5.56-1.el8.ppc64le.rpm bluez-debugsource-5.56-1.el8.ppc64le.rpm bluez-hid2hci-debuginfo-5.56-1.el8.ppc64le.rpm bluez-libs-debuginfo-5.56-1.el8.ppc64le.rpm bluez-obexd-debuginfo-5.56-1.el8.ppc64le.rpm s390x: bluez-cups-5.56-1.el8.s390x.rpm bluez-cups-debuginfo-5.56-1.el8.s390x.rpm bluez-debuginfo-5.56-1.el8.s390x.rpm bluez-debugsource-5.56-1.el8.s390x.rpm bluez-hid2hci-debuginfo-5.56-1.el8.s390x.rpm bluez-libs-debuginfo-5.56-1.el8.s390x.rpm bluez-obexd-debuginfo-5.56-1.el8.s390x.rpm x86_64: bluez-cups-5.56-1.el8.x86_64.rpm bluez-cups-debuginfo-5.56-1.el8.x86_64.rpm bluez-debuginfo-5.56-1.el8.x86_64.rpm bluez-debugsource-5.56-1.el8.x86_64.rpm bluez-hid2hci-debuginfo-5.56-1.el8.x86_64.rpm bluez-libs-debuginfo-5.56-1.el8.x86_64.rpm bluez-obexd-debuginfo-5.56-1.el8.x86_64.rpm Red Hat Enterprise Linux BaseOS (v. 8): Source: bluez-5.56-1.el8.src.rpm aarch64: bluez-5.56-1.el8.aarch64.rpm bluez-cups-debuginfo-5.56-1.el8.aarch64.rpm bluez-debuginfo-5.56-1.el8.aarch64.rpm bluez-debugsource-5.56-1.el8.aarch64.rpm bluez-hid2hci-5.56-1.el8.aarch64.rpm bluez-hid2hci-debuginfo-5.56-1.el8.aarch64.rpm bluez-libs-5.56-1.el8.aarch64.rpm bluez-libs-debuginfo-5.56-1.el8.aarch64.rpm bluez-obexd-5.56-1.el8.aarch64.rpm bluez-obexd-debuginfo-5.56-1.el8.aarch64.rpm ppc64le: bluez-5.56-1.el8.ppc64le.rpm bluez-cups-debuginfo-5.56-1.el8.ppc64le.rpm bluez-debuginfo-5.56-1.el8.ppc64le.rpm bluez-debugsource-5.56-1.el8.ppc64le.rpm bluez-hid2hci-5.56-1.el8.ppc64le.rpm bluez-hid2hci-debuginfo-5.56-1.el8.ppc64le.rpm bluez-libs-5.56-1.el8.ppc64le.rpm bluez-libs-debuginfo-5.56-1.el8.ppc64le.rpm bluez-obexd-5.56-1.el8.ppc64le.rpm bluez-obexd-debuginfo-5.56-1.el8.ppc64le.rpm s390x: bluez-5.56-1.el8.s390x.rpm bluez-cups-debuginfo-5.56-1.el8.s390x.rpm bluez-debuginfo-5.56-1.el8.s390x.rpm bluez-debugsource-5.56-1.el8.s390x.rpm bluez-hid2hci-5.56-1.el8.s390x.rpm bluez-hid2hci-debuginfo-5.56-1.el8.s390x.rpm bluez-libs-5.56-1.el8.s390x.rpm bluez-libs-debuginfo-5.56-1.el8.s390x.rpm bluez-obexd-5.56-1.el8.s390x.rpm bluez-obexd-debuginfo-5.56-1.el8.s390x.rpm x86_64: bluez-5.56-1.el8.x86_64.rpm bluez-cups-debuginfo-5.56-1.el8.i686.rpm bluez-cups-debuginfo-5.56-1.el8.x86_64.rpm bluez-debuginfo-5.56-1.el8.i686.rpm bluez-debuginfo-5.56-1.el8.x86_64.rpm bluez-debugsource-5.56-1.el8.i686.rpm bluez-debugsource-5.56-1.el8.x86_64.rpm bluez-hid2hci-5.56-1.el8.x86_64.rpm bluez-hid2hci-debuginfo-5.56-1.el8.i686.rpm bluez-hid2hci-debuginfo-5.56-1.el8.x86_64.rpm bluez-libs-5.56-1.el8.i686.rpm bluez-libs-5.56-1.el8.x86_64.rpm bluez-libs-debuginfo-5.56-1.el8.i686.rpm bluez-libs-debuginfo-5.56-1.el8.x86_64.rpm bluez-obexd-5.56-1.el8.x86_64.rpm bluez-obexd-debuginfo-5.56-1.el8.i686.rpm bluez-obexd-debuginfo-5.56-1.el8.x86_64.rpm Red Hat Enterprise Linux CRB (v. 8): aarch64: bluez-cups-debuginfo-5.56-1.el8.aarch64.rpm bluez-debuginfo-5.56-1.el8.aarch64.rpm bluez-debugsource-5.56-1.el8.aarch64.rpm bluez-hid2hci-debuginfo-5.56-1.el8.aarch64.rpm bluez-libs-debuginfo-5.56-1.el8.aarch64.rpm bluez-libs-devel-5.56-1.el8.aarch64.rpm bluez-obexd-debuginfo-5.56-1.el8.aarch64.rpm ppc64le: bluez-cups-debuginfo-5.56-1.el8.ppc64le.rpm bluez-debuginfo-5.56-1.el8.ppc64le.rpm bluez-debugsource-5.56-1.el8.ppc64le.rpm bluez-hid2hci-debuginfo-5.56-1.el8.ppc64le.rpm bluez-libs-debuginfo-5.56-1.el8.ppc64le.rpm bluez-libs-devel-5.56-1.el8.ppc64le.rpm bluez-obexd-debuginfo-5.56-1.el8.ppc64le.rpm s390x: bluez-cups-debuginfo-5.56-1.el8.s390x.rpm bluez-debuginfo-5.56-1.el8.s390x.rpm bluez-debugsource-5.56-1.el8.s390x.rpm bluez-hid2hci-debuginfo-5.56-1.el8.s390x.rpm bluez-libs-debuginfo-5.56-1.el8.s390x.rpm bluez-libs-devel-5.56-1.el8.s390x.rpm bluez-obexd-debuginfo-5.56-1.el8.s390x.rpm x86_64: bluez-cups-debuginfo-5.56-1.el8.i686.rpm bluez-cups-debuginfo-5.56-1.el8.x86_64.rpm bluez-debuginfo-5.56-1.el8.i686.rpm bluez-debuginfo-5.56-1.el8.x86_64.rpm bluez-debugsource-5.56-1.el8.i686.rpm bluez-debugsource-5.56-1.el8.x86_64.rpm bluez-hid2hci-debuginfo-5.56-1.el8.i686.rpm bluez-hid2hci-debuginfo-5.56-1.el8.x86_64.rpm bluez-libs-debuginfo-5.56-1.el8.i686.rpm bluez-libs-debuginfo-5.56-1.el8.x86_64.rpm bluez-libs-devel-5.56-1.el8.i686.rpm bluez-libs-devel-5.56-1.el8.x86_64.rpm bluez-obexd-debuginfo-5.56-1.el8.i686.rpm bluez-obexd-debuginfo-5.56-1.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYYrdt9zjgjWX9erEAQj3Kg//RFuvdDqQfdw3Wm00uS+qmxOaUzvG5OVO XrSpoMb5VcrJRKTBY3u4ObfU1+yGJ5iF2wGwxgu6QF4tLUwC/OPSCgvS0lifTcEy OkvBnkR06tBsGTjBmN8wyHQTEGVdFLlFU+sbC+yKjHmF31o6ZgDD7VZV/wuzqSGk ZPR39CzfnnnTzLz2QvrYJZZ/tpgvS5qOTebP/qEmQCuwmRJeTaY+pgj28e8njQjU NMqAcR7/kPX6LIYzdhQgEOCWZ9imxjoYAwY/VMu9T23zuyTkRTQtCC8Q5GJgATRV qD4adxIeyJSvvMzJf6VkvzXu32AWira9oFgFPiYwjEYVJcMmGKZGJx94a1mu2Rs8 TFi3+iuVAdHE1S9NJ54nfxkjnVs6XKDIITNIZkl+isfQEtkkUBfeVcK6U/57wCKN jgvUtrcQpqNH86x3Uu4W//eFlXQrbfzsogDx10d/jSk+PPg60mP6Fzcad8PTgr/H vZygkT1bLbY7lOXejiVnJ8+otIv7tK+XzajDvQwgwC+9IigncMygiSS0SelVht4U rvdqIKs2btFOBk+GhUzEMogaGFDqRUpFKIEFFVtL6d3Uvr4rgDHjMewKdU9v11ED 94Cg3wX0XFYvrnRS1Lxx9m1vuWtevD4EyZLSxcAEMLSXEMoa2c8f7Y6gxb7PGAKb irY79RTeDm4=R6rn -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce . ========================================================================== Ubuntu Security Notice USN-5343-1 March 22, 2022 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM - Ubuntu 14.04 ESM Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-kvm: Linux kernel for cloud environments - linux-lts-xenial: Linux hardware enablement kernel from Xenial for Trusty Details: Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 release_agent feature. A local attacker could use this to gain administrative privileges. (CVE-2022-0492) It was discovered that the aufs file system in the Linux kernel did not properly restrict mount namespaces, when mounted with the non-default allow_userns option set. A local attacker could use this to gain administrative privileges. (CVE-2016-2853) It was discovered that the aufs file system in the Linux kernel did not properly maintain POSIX ACL xattr data, when mounted with the non-default allow_userns option. A local attacker could possibly use this to gain elevated privileges. (CVE-2016-2854) It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-19449) It was discovered that the XFS file system implementation in the Linux kernel did not properly validate meta data in some circumstances. An attacker could use this to construct a malicious XFS image that, when mounted, could cause a denial of service. (CVE-2020-12655) Kiyin (尹亮) discovered that the NFC LLCP protocol implementation in the Linux kernel contained a reference counting error. A local attacker could use this to cause a denial of service (system crash). (CVE-2020-25670) Kiyin (尹亮) discovered that the NFC LLCP protocol implementation in the Linux kernel did not properly deallocate memory in certain error situations. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2020-25671, CVE-2020-25672) Kiyin (尹亮) discovered that the NFC LLCP protocol implementation in the Linux kernel did not properly handle error conditions in some situations, leading to an infinite loop. A local attacker could use this to cause a denial of service. (CVE-2020-25673) Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation incorrectly handled EAPOL frames from unauthenticated senders. A physically proximate attacker could inject malicious packets to cause a denial of service (system crash). (CVE-2020-26139) Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation could reassemble mixed encrypted and plaintext fragments. A physically proximate attacker could possibly use this issue to inject packets or exfiltrate selected fragments. (CVE-2020-26147) It was discovered that the BR/EDR pin-code pairing procedure in the Linux kernel was vulnerable to an impersonation attack. A physically proximate attacker could possibly use this to pair to a device without knowledge of the pin-code. (CVE-2020-26555) It was discovered that the bluetooth subsystem in the Linux kernel did not properly perform access control. An authenticated attacker could possibly use this to expose sensitive information. (CVE-2020-26558, CVE-2021-0129) It was discovered that the FUSE user space file system implementation in the Linux kernel did not properly handle bad inodes in some situations. A local attacker could possibly use this to cause a denial of service. (CVE-2020-36322) It was discovered that the Infiniband RDMA userspace connection manager implementation in the Linux kernel contained a race condition leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possible execute arbitrary code. (CVE-2020-36385) It was discovered that the DRM subsystem in the Linux kernel contained double-free vulnerabilities. A privileged attacker could possibly use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-20292) It was discovered that a race condition existed in the timer implementation in the Linux kernel. A privileged attacker could use this to cause a denial of service. (CVE-2021-20317) Or Cohen and Nadav Markus discovered a use-after-free vulnerability in the nfc implementation in the Linux kernel. A privileged local attacker could use this issue to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-23134) It was discovered that the Xen paravirtualization backend in the Linux kernel did not properly deallocate memory in some situations. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-28688) It was discovered that the RPA PCI Hotplug driver implementation in the Linux kernel did not properly handle device name writes via sysfs, leading to a buffer overflow. A privileged attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-28972) It was discovered that a race condition existed in the netfilter subsystem of the Linux kernel when replacing tables. A local attacker could use this to cause a denial of service (system crash). (CVE-2021-29650) It was discovered that a race condition in the kernel Bluetooth subsystem could lead to use-after-free of slab objects. An attacker could use this issue to possibly execute arbitrary code. (CVE-2021-32399) It was discovered that the CIPSO implementation in the Linux kernel did not properly perform reference counting in some situations, leading to use- after-free vulnerabilities. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33033) It was discovered that a use-after-free existed in the Bluetooth HCI driver of the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33034) Asaf Modelevsky discovered that the Intel(R) Ethernet ixgbe driver for the Linux kernel did not properly validate large MTU requests from Virtual Function (VF) devices. A local attacker could possibly use this to cause a denial of service. (CVE-2021-33098) Norbert Slusarek discovered that the CAN broadcast manger (bcm) protocol implementation in the Linux kernel did not properly initialize memory in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2021-34693) 马哲宇 discovered that the IEEE 1394 (Firewire) nosy packet sniffer driver in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3483) It was discovered that an out-of-bounds (OOB) memory access flaw existed in the f2fs module of the Linux kernel. A local attacker could use this issue to cause a denial of service (system crash). (CVE-2021-3506) It was discovered that the bluetooth subsystem in the Linux kernel did not properly handle HCI device initialization failure, leading to a double-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2021-3564) It was discovered that the bluetooth subsystem in the Linux kernel did not properly handle HCI device detach events, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2021-3573) Murray McAllister discovered that the joystick device interface in the Linux kernel did not properly validate data passed via an ioctl(). A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code on systems with a joystick device registered. (CVE-2021-3612) It was discovered that the tracing subsystem in the Linux kernel did not properly keep track of per-cpu ring buffer state. A privileged attacker could use this to cause a denial of service. (CVE-2021-3679) It was discovered that the Virtio console implementation in the Linux kernel did not properly validate input lengths in some situations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2021-38160) It was discovered that the KVM hypervisor implementation in the Linux kernel did not properly compute the access permissions for shadow pages in some situations. A local attacker could use this to cause a denial of service. (CVE-2021-38198) It was discovered that the MAX-3421 host USB device driver in the Linux kernel did not properly handle device removal events. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2021-38204) It was discovered that the NFC implementation in the Linux kernel did not properly handle failed connect events leading to a NULL pointer dereference. A local attacker could use this to cause a denial of service. (CVE-2021-38208) It was discovered that the configfs interface for USB gadgets in the Linux kernel contained a race condition. A local attacker could possibly use this to expose sensitive information (kernel memory). (CVE-2021-39648) It was discovered that the ext4 file system in the Linux kernel contained a race condition when writing xattrs to an inode. A local attacker could use this to cause a denial of service or possibly gain administrative privileges. (CVE-2021-40490) It was discovered that the 6pack network protocol driver in the Linux kernel did not properly perform validation checks. A privileged attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2021-42008) It was discovered that the ISDN CAPI implementation in the Linux kernel contained a race condition in certain situations that could trigger an array out-of-bounds bug. A privileged local attacker could possibly use this to cause a denial of service or execute arbitrary code. (CVE-2021-43389) It was discovered that the Phone Network protocol (PhoNet) implementation in the Linux kernel did not properly perform reference counting in some error conditions. A local attacker could possibly use this to cause a denial of service (memory exhaustion). (CVE-2021-45095) Wenqing Liu discovered that the f2fs file system in the Linux kernel did not properly validate the last xattr entry in an inode. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-45469) Amit Klein discovered that the IPv6 implementation in the Linux kernel could disclose internal state in some situations. An attacker could possibly use this to expose sensitive information. (CVE-2021-45485) It was discovered that the per cpu memory allocator in the Linux kernel could report kernel pointers via dmesg. An attacker could use this to expose sensitive information or in conjunction with another kernel vulnerability. (CVE-2018-5995) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: linux-image-4.4.0-1103-kvm 4.4.0-1103.112 linux-image-4.4.0-1138-aws 4.4.0-1138.152 linux-image-4.4.0-222-generic 4.4.0-222.255 linux-image-4.4.0-222-lowlatency 4.4.0-222.255 linux-image-aws 4.4.0.1138.143 linux-image-generic 4.4.0.222.229 linux-image-kvm 4.4.0.1103.101 linux-image-lowlatency 4.4.0.222.229 linux-image-virtual 4.4.0.222.229 Ubuntu 14.04 ESM: linux-image-4.4.0-1102-aws 4.4.0-1102.107 linux-image-4.4.0-222-generic 4.4.0-222.255~14.04.1 linux-image-4.4.0-222-lowlatency 4.4.0-222.255~14.04.1 linux-image-aws 4.4.0.1102.100 linux-image-generic-lts-xenial 4.4.0.222.193 linux-image-lowlatency-lts-xenial 4.4.0.222.193 linux-image-virtual-lts-xenial 4.4.0.222.193 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-5343-1 CVE-2016-2853, CVE-2016-2854, CVE-2018-5995, CVE-2019-19449, CVE-2020-12655, CVE-2020-25670, CVE-2020-25671, CVE-2020-25672, CVE-2020-25673, CVE-2020-26139, CVE-2020-26147, CVE-2020-26555, CVE-2020-26558, CVE-2020-36322, CVE-2020-36385, CVE-2021-0129, CVE-2021-20292, CVE-2021-20317, CVE-2021-23134, CVE-2021-28688, CVE-2021-28972, CVE-2021-29650, CVE-2021-32399, CVE-2021-33033, CVE-2021-33034, CVE-2021-33098, CVE-2021-34693, CVE-2021-3483, CVE-2021-3506, CVE-2021-3564, CVE-2021-3573, CVE-2021-3612, CVE-2021-3679, CVE-2021-38160, CVE-2021-38198, CVE-2021-38204, CVE-2021-38208, CVE-2021-39648, CVE-2021-40490, CVE-2021-42008, CVE-2021-43389, CVE-2021-45095, CVE-2021-45469, CVE-2021-45485, CVE-2022-0492 . Software Description: - bluez: Bluetooth tools and daemons Details: It was discovered that BlueZ incorrectly checked certain permissions when pairing. (CVE-2020-26558) Jay LV discovered that BlueZ incorrectly handled redundant disconnect MGMT events. (CVE-2020-27153) Ziming Zhang discovered that BlueZ incorrectly handled certain array indexes

Trust: 1.62

sources: NVD: CVE-2020-26558 // VULMON: CVE-2020-26558 // PACKETSTORM: 168567 // PACKETSTORM: 164844 // PACKETSTORM: 166417 // PACKETSTORM: 163184 // PACKETSTORM: 163186 // PACKETSTORM: 163599 // PACKETSTORM: 163877

IOT TAXONOMY

category:['network device']sub_category:bluetooth device

Trust: 0.1

sources: OTHER: None

AFFECTED PRODUCTS

vendor:fedoraprojectmodel:fedorascope:eqversion:34

Trust: 1.0

vendor:intelmodel:ax1675scope:eqversion: -

Trust: 1.0

vendor:linuxmodel:kernelscope:ltversion:5.13

Trust: 1.0

vendor:bluetoothmodel:core specificationscope:gteversion:2.1

Trust: 1.0

vendor:intelmodel:ax210scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 9461scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 1550scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 9560scope:eqversion: -

Trust: 1.0

vendor:bluetoothmodel:core specificationscope:lteversion:5.2

Trust: 1.0

vendor:intelmodel:ax200scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 8265scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 7265scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 8260scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 3168scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ax201scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 9462scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ax1650scope:eqversion: -

Trust: 1.0

vendor:intelmodel:ac 9260scope:eqversion: -

Trust: 1.0

vendor:debianmodel:linuxscope:eqversion:9.0

Trust: 1.0

vendor:intelmodel:ac 3165scope:eqversion: -

Trust: 1.0

sources: NVD: CVE-2020-26558

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-26558
value: MEDIUM

Trust: 1.0

CNNVD: CNNVD-202105-1503
value: MEDIUM

Trust: 0.6

VULMON: CVE-2020-26558
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2020-26558
severity: MEDIUM
baseScore: 4.3
vectorString: AV:A/AC:M/AU:N/C:P/I:P/A:N
accessVector: ADJACENT_NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 5.5
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.1

nvd@nist.gov: CVE-2020-26558
baseSeverity: MEDIUM
baseScore: 4.2
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
attackVector: ADJACENT
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
exploitabilityScore: 1.6
impactScore: 2.5
version: 3.1

Trust: 1.0

sources: VULMON: CVE-2020-26558 // CNNVD: CNNVD-202105-1503 // NVD: CVE-2020-26558

PROBLEMTYPE DATA

problemtype:CWE-287

Trust: 1.0

sources: NVD: CVE-2020-26558

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-202105-1503

TYPE

authorization issue

Trust: 0.6

sources: CNNVD: CNNVD-202105-1503

PATCH

title:Bluetooth Core Specification Remediation measures for authorization problem vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=152684

Trust: 0.6

title:Red Hat: CVE-2020-26558url:https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database&qid=CVE-2020-26558

Trust: 0.1

title:Debian CVElist Bug Report Logs: bluez: CVE-2021-0129 CVE-2020-26558url:https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=0634986a83e749d947f670c2c6fc6f8a

Trust: 0.1

title:Debian Security Advisories: DSA-4951-1 bluez -- security updateurl:https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories&qid=022b2816062a8ca433d97ca2e73731f3

Trust: 0.1

title:Arch Linux Issues: url:https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues&qid=CVE-2020-26558 log

Trust: 0.1

title:CVE-2020-26558url:https://github.com/AlAIAL90/CVE-2020-26558

Trust: 0.1

title:BleepingComputerurl:https://www.bleepingcomputer.com/news/security/bluetooth-flaws-allow-attackers-to-impersonate-legitimate-devices/

Trust: 0.1

sources: VULMON: CVE-2020-26558 // CNNVD: CNNVD-202105-1503

EXTERNAL IDS

db:NVDid:CVE-2020-26558

Trust: 2.5

db:CERT/CCid:VU#799380

Trust: 1.7

db:PACKETSTORMid:168567

Trust: 0.7

db:PACKETSTORMid:164844

Trust: 0.7

db:PACKETSTORMid:166417

Trust: 0.7

db:PACKETSTORMid:163184

Trust: 0.7

db:PACKETSTORMid:163877

Trust: 0.7

db:AUSCERTid:ESB-2021.2860

Trust: 0.6

db:AUSCERTid:ESB-2021.2350

Trust: 0.6

db:AUSCERTid:ESB-2021.2805

Trust: 0.6

db:AUSCERTid:ESB-2021.2256

Trust: 0.6

db:AUSCERTid:ESB-2022.1225

Trust: 0.6

db:AUSCERTid:ESB-2021.2453

Trust: 0.6

db:AUSCERTid:ESB-2021.2662

Trust: 0.6

db:AUSCERTid:ESB-2021.1976

Trust: 0.6

db:AUSCERTid:ESB-2021.1999

Trust: 0.6

db:AUSCERTid:ESB-2022.5284

Trust: 0.6

db:AUSCERTid:ESB-2021.2368

Trust: 0.6

db:AUSCERTid:ESB-2021.2145

Trust: 0.6

db:AUSCERTid:ESB-2021.2409

Trust: 0.6

db:AUSCERTid:ESB-2021.3754

Trust: 0.6

db:AUSCERTid:ESB-2021.2290

Trust: 0.6

db:AUSCERTid:ESB-2021.2248

Trust: 0.6

db:PACKETSTORMid:163598

Trust: 0.6

db:PACKETSTORMid:163905

Trust: 0.6

db:CS-HELPid:SB2021052614

Trust: 0.6

db:CS-HELPid:SB2021062109

Trust: 0.6

db:CS-HELPid:SB2021070408

Trust: 0.6

db:CS-HELPid:SB2021060801

Trust: 0.6

db:CS-HELPid:SB2021080805

Trust: 0.6

db:CS-HELPid:SB2021111135

Trust: 0.6

db:LENOVOid:LEN-51734

Trust: 0.6

db:CNNVDid:CNNVD-202105-1503

Trust: 0.6

db:OTHERid:NONE

Trust: 0.1

db:VULMONid:CVE-2020-26558

Trust: 0.1

db:PACKETSTORMid:163186

Trust: 0.1

db:PACKETSTORMid:163599

Trust: 0.1

sources: OTHER: None // VULMON: CVE-2020-26558 // PACKETSTORM: 168567 // PACKETSTORM: 164844 // PACKETSTORM: 166417 // PACKETSTORM: 163184 // PACKETSTORM: 163186 // PACKETSTORM: 163599 // PACKETSTORM: 163877 // CNNVD: CNNVD-202105-1503 // NVD: CVE-2020-26558

REFERENCES

url:https://kb.cert.org/vuls/id/799380

Trust: 1.7

url:https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/

Trust: 1.7

url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.html

Trust: 1.7

url:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00517.html

Trust: 1.7

url:https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html

Trust: 1.7

url:https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html

Trust: 1.7

url:https://lists.debian.org/debian-lts-announce/2021/06/msg00022.html

Trust: 1.7

url:https://security.gentoo.org/glsa/202209-16

Trust: 1.7

url:https://www.debian.org/security/2021/dsa-4951

Trust: 1.6

url:https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/nss6ctge4ugtjlcozoasdr3t3sll6qjz/

Trust: 1.0

url:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/nss6ctge4ugtjlcozoasdr3t3sll6qjz/

Trust: 0.7

url:https://nvd.nist.gov/vuln/detail/cve-2020-26558

Trust: 0.7

url:https://packetstormsecurity.com/files/168567/gentoo-linux-security-advisory-202209-16.html

Trust: 0.6

url:https://www.cybersecurity-help.cz/vdb/sb2021111135

Trust: 0.6

url:https://www.cybersecurity-help.cz/vdb/sb2021052614

Trust: 0.6

url:https://source.android.com/security/bulletin/2021-06-01

Trust: 0.6

url:https://www.cybersecurity-help.cz/vdb/sb2021080805

Trust: 0.6

url:https://packetstormsecurity.com/files/164844/red-hat-security-advisory-2021-4432-03.html

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.2368

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.3754

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2022.5284

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.2145

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.2662

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.2860

Trust: 0.6

url:https://packetstormsecurity.com/files/163877/ubuntu-security-notice-usn-5046-1.html

Trust: 0.6

url:https://www.qualcomm.com/company/product-security/bulletins/june-2021-bulletin

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2022.1225

Trust: 0.6

url:https://www.cybersecurity-help.cz/vdb/sb2021060801

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.1976

Trust: 0.6

url:https://www.cybersecurity-help.cz/vdb/sb2021062109

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.2248

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.2409

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.2805

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.1999

Trust: 0.6

url:https://www.cybersecurity-help.cz/vdb/sb2021070408

Trust: 0.6

url:https://packetstormsecurity.com/files/166417/ubuntu-security-notice-usn-5343-1.html

Trust: 0.6

url:https://packetstormsecurity.com/files/163184/ubuntu-security-notice-usn-4989-1.html

Trust: 0.6

url:https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202107-0000001170634565

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.2350

Trust: 0.6

url:https://packetstormsecurity.com/files/163905/ubuntu-security-notice-usn-5050-1.html

Trust: 0.6

url:https://support.lenovo.com/us/en/product_security/len-51734

Trust: 0.6

url:https://vigilance.fr/vulnerability/bluetooth-privilege-escalation-via-passkey-entry-impersonation-35544

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.2256

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.2453

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2021.2290

Trust: 0.6

url:https://packetstormsecurity.com/files/163598/ubuntu-security-notice-usn-5017-1.html

Trust: 0.6

url:https://access.redhat.com/security/cve/cve-2020-26558

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2021-3588

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2021-3564

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2020-26147

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2021-32399

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2021-23134

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2021-33034

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2020-26139

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2020-27153

Trust: 0.2

url:https://ubuntu.com/security/notices/usn-4989-1

Trust: 0.2

url:https://ieeexplore.ieee.org/abstract/document/10769424

Trust: 0.1

url:https://cwe.mitre.org/data/definitions/287.html

Trust: 0.1

url:https://github.com/alaial90/cve-2020-26558

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

url:https://creativecommons.org/licenses/by-sa/2.5

Trust: 0.1

url:https://security.gentoo.org/

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-0129

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2022-0204

Trust: 0.1

url:https://bugs.gentoo.org.

Trust: 0.1

url:https://listman.redhat.com/mailman/listinfo/rhsa-announce

Trust: 0.1

url:https://access.redhat.com/security/updates/classification/#moderate

Trust: 0.1

url:https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/

Trust: 0.1

url:https://access.redhat.com/articles/11258

Trust: 0.1

url:https://access.redhat.com/security/team/key/

Trust: 0.1

url:https://access.redhat.com/errata/rhsa-2021:4432

Trust: 0.1

url:https://bugzilla.redhat.com/):

Trust: 0.1

url:https://access.redhat.com/security/team/contact/

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-34693

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-2853

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-26555

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-12655

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-20292

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-28972

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-36322

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2018-5995

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-33098

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-25670

Trust: 0.1

url:https://ubuntu.com/security/notices/usn-5343-1

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-3506

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-25673

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-33033

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-28688

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-20317

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-29650

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-3483

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-36385

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-19449

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2016-2854

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/bluez/5.56-0ubuntu4.1

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/bluez/5.53-0ubuntu3.2

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/bluez/5.55-0ubuntu1.2

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/bluez/5.48-0ubuntu3.5

Trust: 0.1

url:https://ubuntu.com/security/notices/usn-4989-2

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux/4.15.0-151.157

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-kvm/4.15.0-1097.99

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-oracle/4.15.0-1078.86

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-gcp-4.15/4.15.0-1106.120

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-33200

Trust: 0.1

url:https://ubuntu.com/security/notices/usn-5018-1

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-24586

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-aws/4.15.0-1109.116

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-raspi2/4.15.0-1092.98

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-azure-4.15/4.15.0-1121.134

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-24587

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-33909

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-31829

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-snapdragon/4.15.0-1109.118

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-azure/5.11.0-1013.14

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-28691

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-gcp/5.11.0-1017.19

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux/5.11.0-31.33

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-hwe-5.11/5.11.0-27.29~20.04.1

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-oracle/5.11.0-1016.17

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-3573

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-raspi/5.11.0-1016.17

Trust: 0.1

url:https://ubuntu.com/security/notices/usn-5046-1

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-3587

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-aws/5.11.0-1016.17

Trust: 0.1

sources: OTHER: None // VULMON: CVE-2020-26558 // PACKETSTORM: 168567 // PACKETSTORM: 164844 // PACKETSTORM: 166417 // PACKETSTORM: 163184 // PACKETSTORM: 163186 // PACKETSTORM: 163599 // PACKETSTORM: 163877 // CNNVD: CNNVD-202105-1503 // NVD: CVE-2020-26558

CREDITS

Ubuntu

Trust: 0.5

sources: PACKETSTORM: 166417 // PACKETSTORM: 163184 // PACKETSTORM: 163186 // PACKETSTORM: 163599 // PACKETSTORM: 163877

SOURCES

db:OTHERid: -
db:VULMONid:CVE-2020-26558
db:PACKETSTORMid:168567
db:PACKETSTORMid:164844
db:PACKETSTORMid:166417
db:PACKETSTORMid:163184
db:PACKETSTORMid:163186
db:PACKETSTORMid:163599
db:PACKETSTORMid:163877
db:CNNVDid:CNNVD-202105-1503
db:NVDid:CVE-2020-26558

LAST UPDATE DATE

2025-07-08T22:27:42.679000+00:00


SOURCES UPDATE DATE

db:VULMONid:CVE-2020-26558date:2021-08-07T00:00:00
db:CNNVDid:CNNVD-202105-1503date:2022-10-24T00:00:00
db:NVDid:CVE-2020-26558date:2023-11-07T03:20:37.400

SOURCES RELEASE DATE

db:VULMONid:CVE-2020-26558date:2021-05-24T00:00:00
db:PACKETSTORMid:168567date:2022-09-30T14:52:58
db:PACKETSTORMid:164844date:2021-11-10T17:05:47
db:PACKETSTORMid:166417date:2022-03-23T16:02:30
db:PACKETSTORMid:163184date:2021-06-17T17:45:55
db:PACKETSTORMid:163186date:2021-06-17T17:49:44
db:PACKETSTORMid:163599date:2021-07-21T16:04:42
db:PACKETSTORMid:163877date:2021-08-18T15:28:00
db:CNNVDid:CNNVD-202105-1503date:2021-05-24T00:00:00
db:NVDid:CVE-2020-26558date:2021-05-24T18:15:07.930