Candidate: CVE-2015-6613 PublicDate: 2015-11-03 11:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6613 https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ Description: Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send commands to a debugging port, and consequently gain privileges, via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24371736. Ubuntu-Description: Notes: jdstrand> Ubuntu does not use the Android bluetooth stack Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_android: upstream_android: released (5.1.1 LMY48X) precise_android: DNE trusty_android: ignored trusty/esm_android: DNE (trusty was ignored) vivid_android: ignored vivid/stable-phone-overlay_android: ignored vivid/ubuntu-core_android: DNE wily_android: ignored devel_android: ignored