Skip to content
OpenAdvisories
Unscored USN-4605-2 0 CVEs

blueman vulnerability

Published Nov 3, 2020 · Updated Feb 10, 2026

Summary

Vaisha Bernard discovered that blueman did not properly sanitize input on
the d-bus interface to blueman-mechanism. A local attacker could possibly
use this issue to escalate privileges and run arbitrary code or cause a
denial of service. (CVE-2020-15238)

While a previous security update fixed the issue, this update provides
additional improvements by enabling PolicyKit authentication for
privileged commands.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS blueman 2.1.2-1ubuntu0.2

References

  • report
    https://launchpad.net/bugs/1897287