HighFix available
bluez — security advisory
Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access
- Products
- bluez
- Affected versions
- Not specified
- Fixed versions
- 5.50-1.1
- CVEs
- CVE-2020-0556
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 12:25 UTC · Revision 1
Source evidence
Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access
osv:DEBIAN-CVE-2020-0556
bluez
Fixed versions: 5.50-1.1
bluez
Fixed versions: 5.50-1.1
bluez
Fixed versions: 5.50-1.1
Complete source record
{
"id": "61a3e91abe0bc08b1297d51de72e8eebf2cbc6b55dbf43dc6ad3e7b18b4c110e",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2020-0556",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2020-0556",
"summary": "Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access",
"evidence": "osv:DEBIAN-CVE-2020-0556",
"products": [
{
"name": {
"value": "bluez",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.50-1.1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bluez",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.50-1.1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bluez",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.50-1.1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "DEBIAN-CVE-2020-0556",
"aliases": [
"DEBIAN-CVE-2020-0556"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.50-1.1"
}
]
}
],
"package": {
"name": "bluez",
"purl": "pkg:deb/debian/bluez?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-0556.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.50-1.1"
}
]
}
],
"package": {
"name": "bluez",
"purl": "pkg:deb/debian/bluez?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-0556.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.50-1.1"
}
]
}
],
"package": {
"name": "bluez",
"purl": "pkg:deb/debian/bluez?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-0556.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-26T12:00:06.441492744Z",
"provider": "osv",
"upstream": [
"CVE-2020-0556"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2020-0556"
]
},
"related_cves": [
{
"value": "CVE-2020-0556",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 450983,
"published_at": "2020-03-12T21:15:14.157+00:00"
}