CVE-2020-24490
MEDIUMBlueZ - Unauthenticated Denial of Service via Adjacent Access
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2020-24490. PoCs published by AbrarKhan.
AI-analyzed exploit summary This repository appears to be a documentation dump from a Linux kernel version (4.19.72) and does not contain exploit code or a PoC for CVE-2020-24490. The files provided are standard kernel documentation and configuration scripts.
Description
Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ.
Exploits (2)
This repository appears to be a documentation dump from a Linux kernel version (4.19.72) and does not contain exploit code or a PoC for CVE-2020-24490. The files provided are standard kernel documentation and configuration scripts.
The provided code is a truncated snippet of the BlueZ Bluetooth stack's HCI event handling logic, specifically the `hci_event.c` file. It does not contain any exploit code or proof-of-concept for CVE-2020-24490, only legitimate Bluetooth protocol handling functions.
References (1)
Scores
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H