CVE-2020-27153 - CVE House
Back to Database
Status published Unknown CVE-2020-27153

In BlueZ before 5.55, a double free was found in...

Vulnerability Description

In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-27153

Credits & Attribution

No credits recorded in the NVD database.

References

More from bluez

View All →
CVE-2022-39177
BlueZ before 5.59 allows physically proximate attackers to cause a...
Unknown 0
CVE-2022-39176
BlueZ before 5.59 allows physically proximate attackers to obtain sensitive...
Unknown 0
CVE-2021-43400
An issue was discovered in gatt-database.c in BlueZ 5.61. A...
Critical 9.1
CVE-2021-41229
Memory leak in BlueZ
Medium 4.3
CVE-2019-8922
A heap-based buffer overflow was discovered in bluetoothd in BlueZ...
Unknown 0

Affected Vendor

Affected Software

bluez, debian linux, leap
Vulnerable Versions:
0, 9.0, 10.0, 15.1, 15.2

Timeline

Official Publish: October 15th, 2020
Last Modified: April 15th, 2026
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.