Log in Start free

Vulnerability · Published May 24, 2021 · Assigned by mitre

CVE-2020-26556

High 7.5

In plain English

A high-severity security flaw in the bluez package (Ubuntu). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).

Severity (CVSS NVD)7.5High
Exploit odds (30 days)0.9%top 39.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue before the provisioning procedure times out, to complete authentication by leveraging Malleable Commitment.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Ubuntu:22.04:LTSbluezno fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSbluezno fix listedUBUNTU-CVE-2020-26556
Ubuntu:25.10bluezno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2020-26556
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2020-26556
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2020-26556
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2020-26556
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2020-26556
Ubuntu:25.10linux-gcpno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2020-26556
Ubuntu:25.10linux-oracleno fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2020-26556
Ubuntu:25.10linux-raspino fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2020-26556
Ubuntu:25.10linux-realtimeno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2020-26556
Ubuntu:25.10linux-riscvno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2020-26556
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2020-26556
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2020-26556

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References