Skip to content
OpenAdvisories
High USN-4605-1 1 CVE

blueman vulnerability

Published Oct 27, 2020 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Vaisha Bernard discovered that blueman did not properly sanitize input on
the d-bus interface to blueman-mechanism. A local attacker could possibly
use this issue to escalate privileges and run arbitrary code or cause a
denial of service. (CVE-2020-15238)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS blueman 2.0.4-1ubuntu2.1
Ubuntu · 18.04 LTS 18.04:LTS blueman 2.0.5-1ubuntu1.1
Ubuntu · 20.04 LTS 20.04:LTS blueman 2.1.2-1ubuntu0.1

Vulnerabilities 1

  • High 7.1
    CVE-2020-15238 Public exploit

    Local privilege escalation Blueman

    Blueman is a GTK+ Bluetooth Manager. In Blueman before 2.1.4, the DhcpClient method of the D-Bus interface to blueman-mechanism is prone to an argument injection vulnerability. The impact highly depends on the system configuration. If Polkit-1 is disabled and…

    blueman-project blueman blueman blueman Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2020-15238