Vulnerability · Published Feb 2, 2021 · Assigned by intel
CVE-2020-24490
Medium 6.5
In plain English
A medium-severity security flaw in BlueZ Advisory. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 83% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)2.2%top 17.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | linux | 5.7.17-1 | DEBIAN-CVE-2020-24490 |
| Debian:13 | linux | 5.7.17-1 | DEBIAN-CVE-2020-24490 |
| Debian:14 | linux | 5.7.17-1 | DEBIAN-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux | 5.15.0-130.140 | USN-7179-1 |
| Ubuntu:22.04:LTS | linux | 5.15.0-130.140 | UBUNTU-CVE-2020-24490 |
| Ubuntu:24.04:LTS | linux | 6.8.0-35.35 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1076.83 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1076.83 | USN-7179-2 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1009.9 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1078.87 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1078.87 | USN-7186-2 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1008.8 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1078.87.1 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1074.83 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1074.83 | USN-7179-2 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1008.9 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1072.78 | USN-7179-3 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1072.78 | UBUNTU-CVE-2020-24490 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1004.7 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1057.64 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1057.64 | USN-7179-1 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1067.70 | USN-7179-1 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1067.70 | UBUNTU-CVE-2020-24490 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1006.6 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1071.77 | USN-7186-1 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1071.77 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1071.76 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1071.76 | USN-7179-1 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-128.138 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-128.138 | USN-7179-1 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-35.35.1 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1070.71 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1070.71 | USN-7179-2 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1032.32 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1020.20 | UBUNTU-CVE-2020-24490 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1006.6 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1073.79 | USN-7179-2 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1073.79 | UBUNTU-CVE-2020-24490 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1006.6 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1070.73 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1070.73 | USN-7179-2 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1005.5 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2020-24490 |
| Ubuntu:24.04:LTS | linux-riscv | 6.8.0-35.35.1 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1041.45 | UBUNTU-CVE-2020-24490 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1041.45 | USN-7179-4 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | BlueZ Advisory | all Linux kernel versions that support BlueZ |