Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-coreUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debugUpgrade kernel-64k-debug-coreUpgrade kernel-tools-libsUpgrade kernel-64k-develUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-devel-matchedUpgrade bpftoolUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-64k-debug-develUpgrade rvUpgrade kernel-64k-modules-coreUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-docUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-coreUpgrade python3-perfUpgrade kernel-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-64k-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-devel-matched | May 31, 2024 | Nov 28, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 28, 2023 |
| Msft | — | 2023-11 Cumulative Update for Microsoft Windows 11, version 23H2 (KB5032190)2023-11 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5032198)2023-11 Cumulative Update for Microsoft Windows 10, version 22H2 (KB5032189)2023-11 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5032198)2023-11 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5032202)2023-11 Cumulative Update for Microsoft Windows 11, version 21H2 (KB5032192)2023-11 Cumulative Update for Microsoft Windows 11, version 22H2 (KB5032190)2023-11 Cumulative Update for Microsoft Windows 10, version 21H2 (KB5032189)2023-11 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5032196)2023-11 Cumulative Update for Microsoft Windows 10, version 1809 (KB5032196) | Nov 14, 2023 | Nov 14, 2023 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Dec 2, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 23, 2024 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-rt-debug-kvm | Jun 17, 2024 | Nov 28, 2023 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kernel-default-develUpgrade kernel-preempt-develUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade kernel-devel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-debugUpgrade dtb-renesasUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade dtb-marvellUpgrade kernel-azure-baseUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-lgUpgrade dtb-nvidiaUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade dtb-amlogicUpgrade kernel-preemptUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-default-vdso | Jul 10, 2024 | Nov 28, 2023 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1053-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1057-gkeUpgrade linux-image-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-105-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1053-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1128-azureUpgrade linux-image-5.4.0-1083-bluefieldUpgrade linux-image-oracleUpgrade linux-image-5.15.0-105-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1061-azure-fdeUpgrade linux-image-5.15.0-1043-gkeopUpgrade linux-image-5.4.0-1122-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-253-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1057-kvmUpgrade linux-image-bluefieldUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1058-gcpUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1107-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1055-intel-iotgUpgrade linux-image-5.15.0-1060-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1035-iotUpgrade linux-image-4.15.0-224-genericUpgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1123-awsUpgrade linux-image-4.15.0-1161-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-4.4.0-1130-awsUpgrade linux-image-5.15.0-105-lowlatency-64kUpgrade linux-image-5.15.0-105-generic-64kUpgrade linux-image-5.4.0-1042-xilinx-zynqmpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1130-oracleUpgrade linux-image-5.15.0-105-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1053-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1061-azureUpgrade linux-image-4.15.0-224-lowlatencyUpgrade linux-image-4.15.0-1151-kvmUpgrade linux-image-4.4.0-1131-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.4.0-177-genericUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1053-nvidiaUpgrade linux-image-4.15.0-1176-azureUpgrade linux-image-5.4.0-1127-gcpUpgrade linux-image-5.4.0-177-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1058-oracleUpgrade linux-image-5.4.0-1111-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1070-ibmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-177-generic-lpaeUpgrade linux-image-5.15.0-1058-awsUpgrade linux-image-4.4.0-253-genericUpgrade linux-image-4.15.0-1167-awsUpgrade linux-image-raspiUpgrade linux-image-4.4.0-1168-awsUpgrade linux-image-5.4.0-1090-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem | Apr 22, 2024 | Nov 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub