CVE-2020-24490

Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

3.3 LOWAV:A/AC:L/Au:N/C:N/I:N/A:P

EPSS

2.22% chance of exploitation in the next 30 days, 81th percentile

Published

2021-02-02

Updated

2024-08-04

Proof-of-concept exploits (2)

• AbrarKhan/Linux-4.19.72_CVE-2020-244900★ · 2024-04-29
• AbrarKhan/linux_CVE-2020-24490-beforePatch0★ · 2024-04-29

References

• CVE Record
• NVD entry

Related

• CVE-2024-0023
• CVE-2024-23709
• CVE-2020-24397
• CVE-2020-24548
• CVE-2020-24391
• CVE-2020-24549