Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcp_handler argument.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
@chrissanders88 Older dbus-targeting CVEs with exploits include CVE-2015-8612 as blueman_set_dhcp_handler_dbus_priv_esc , and /var/log/lastore/daemon.log CVE-2016-15045 exploit/linux/local/lastore_daemon_dbus_priv_esc
Post summary
The tweet points out that two older DBus‑targeting CVEs have explicit exploit code available, confirming the vulnerabilities’ exploitability, but it does not report active attacks or patches.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | blueman_project | blueman | - | - | - |