UBUNTU-CVE-2021-0129
Vulnerability Summary
Timeline
Description
Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.
CVSS Metrics
- v3.1•MEDIUM•Score: 5.7CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Systems
- ubuntu•bluez
< 5.37-0ubuntu5.3+esm1 | < 5.48-0ubuntu3.5 | < 5.53-0ubuntu3.2
- ubuntu•linux
all | < 4.4.0-219.252 | < 4.15.0-151.157 | < 5.4.0-80.90
- ubuntu•linux-aws
< 4.4.0-1099.104 | < 4.4.0-1135.149 | < 4.15.0-1109.116 | < 5.4.0-1054.57
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
< 5.11.0-1016.17~20.04.1
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.4
< 5.4.0-1054.57~18.04.1
- ubuntu•linux-aws-5.8
< 5.8.0-1042.44~20.04.1
- ubuntu•linux-aws-fips
< 4.15.0-2051.53 | all | < 5.4.0-1069.73+fips2
- ubuntu•linux-aws-hwe
< 4.15.0-1109.116~16.04.1
- ubuntu•linux-azure
< 4.15.0-1121.134~14.04.1 | < 4.15.0-1121.134~16.04.1 | all | < 5.4.0-1055.57
- ubuntu•linux-azure-4.15
< 4.15.0-1121.134
- ubuntu•linux-azure-5.11
< 5.11.0-1013.14~20.04.1
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.4
< 5.4.0-1055.57~18.04.1
- ubuntu•linux-azure-5.8
< 5.8.0-1040.43~20.04.1
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde-5.15
all
- ubuntu•linux-azure-fips
< 4.15.0-2033.37 | all | < 5.4.0-1073.76+fips1
- ubuntu•linux-bluefield
< 5.4.0-1016.19 | all
- ubuntu•linux-dell300x
< 4.15.0-1027.32
- ubuntu•linux-fips
< 4.4.0-1069.75 | all | < 4.15.0-1066.75 | < 5.4.0-1031.36
- ubuntu•linux-gcp
< 4.15.0-1106.120~16.04.1 | all | < 5.4.0-1049.53
- ubuntu•linux-gcp-4.15
< 4.15.0-1106.120
- ubuntu•linux-gcp-5.11
< 5.11.0-1017.19~20.04.1
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.4
< 5.4.0-1049.53~18.04.1
- ubuntu•linux-gcp-5.8
< 5.8.0-1039.41
- ubuntu•linux-gcp-edge
all
- ubuntu•linux-gcp-fips
< 4.15.0-2016.18 | all | < 5.4.0-1067.71~20.04.1
- ubuntu•linux-gke
< 5.4.0-1049.52
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.4
< 5.4.0-1049.52~18.04.1
- ubuntu•linux-gkeop
< 5.4.0-1021.22
- ubuntu•linux-gkeop-5.4
< 5.4.0-1021.22~18.04.1
- ubuntu•linux-hwe
< 4.15.0-151.157~16.04.1 | all
- ubuntu•linux-hwe-5.11
< 5.11.0-34.36~20.04.1
- ubuntu•linux-hwe-5.4
< 5.4.0-80.90~18.04.1
- ubuntu•linux-hwe-5.8
all
- ubuntu•linux-hwe-edge
all | all
- ubuntu•linux-intel-iot-realtime
all
- ubuntu•linux-kvm
< 4.4.0-1100.109 | < 4.15.0-1097.99 | < 5.4.0-1044.46
- ubuntu•linux-lts-xenial
< 4.4.0-219.252~14.04.1
- ubuntu•linux-nvidia
all
- ubuntu•linux-oem
all
- ubuntu•linux-oem-5.10
< 5.10.0-1032.33
- ubuntu•linux-oem-5.6
all
- ubuntu•linux-oracle
< 4.15.0-1078.86~16.04.1 | < 4.15.0-1078.86 | < 5.4.0-1052.56
- ubuntu•linux-oracle-5.0
all
- ubuntu•linux-oracle-5.11
< 5.11.0-1016.17~20.04.1
Showing first 50 affected entries in server-rendered view.
References (11)
- https://ubuntu.com/security/CVE-2021-0129
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6d19628f539fccf899298ff02ee4c73e4bf6df3f
- https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=00da0fb4972cf59e1c075f313da81ea549cb8738
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00517.html
- https://ubuntu.com/security/notices/USN-5018-1
- https://ubuntu.com/security/notices/USN-5017-1
- https://ubuntu.com/security/notices/USN-5046-1
- https://ubuntu.com/security/notices/USN-5050-1
- https://ubuntu.com/security/notices/USN-5299-1
- https://ubuntu.com/security/notices/USN-5343-1
- https://www.cve.org/CVERecord?id=CVE-2021-0129