Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve parameters used to generate public keys during a Diffie-Hellman key exchange, which may allow a remote attacker to obtain the encryption key used by the device.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
- CVSS 3.0 Base Score: 8
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Bluetooth | apple-osx-security-update-2018-003apple-osx-upgrade-latest | Jun 25, 2026 | Jun 25, 2026 | |
| Centos_linux | — | centos-upgrade-iwl100-firmwarecentos-upgrade-iwl1000-firmwarecentos-upgrade-iwl105-firmwarecentos-upgrade-iwl135-firmwarecentos-upgrade-iwl2000-firmwarecentos-upgrade-iwl2030-firmwarecentos-upgrade-iwl3160-firmwarecentos-upgrade-iwl3945-firmwarecentos-upgrade-iwl4965-firmwarecentos-upgrade-iwl5000-firmwarecentos-upgrade-iwl5150-firmwarecentos-upgrade-iwl6000-firmwarecentos-upgrade-iwl6000g2a-firmwarecentos-upgrade-iwl6000g2b-firmwarecentos-upgrade-iwl6050-firmwarecentos-upgrade-iwl7260-firmwarecentos-upgrade-iwl7265-firmwarecentos-upgrade-linux-firmware | Aug 28, 2019 | Aug 7, 2018 |
| Debian | debian-upgrade-firmware-nonfree | Apr 2, 2019 | Aug 7, 2018 | |
| Redhat_linux | — | redhat-upgrade-iwl100-firmwareredhat-upgrade-iwl1000-firmwareredhat-upgrade-iwl105-firmwareredhat-upgrade-iwl135-firmwareredhat-upgrade-iwl2000-firmwareredhat-upgrade-iwl2030-firmwareredhat-upgrade-iwl3160-firmwareredhat-upgrade-iwl3945-firmwareredhat-upgrade-iwl4965-firmwareredhat-upgrade-iwl5000-firmwareredhat-upgrade-iwl5150-firmwareredhat-upgrade-iwl6000-firmwareredhat-upgrade-iwl6000g2a-firmwareredhat-upgrade-iwl6000g2b-firmwareredhat-upgrade-iwl6050-firmwareredhat-upgrade-iwl7260-firmwareredhat-upgrade-iwl7265-firmwareredhat-upgrade-linux-firmware | Aug 7, 2019 | Aug 7, 2018 |
| Suse | — | suse-upgrade-kernel-firmwaresuse-upgrade-ucode-amd | Feb 19, 2019 | Aug 7, 2018 |
| Ubuntu | ubuntu-upgrade-linux-firmwareubuntu-upgrade-linux-image-4-15-0-1021-oracleubuntu-upgrade-linux-image-4-15-0-1040-gcpubuntu-upgrade-linux-image-4-15-0-1040-gkeubuntu-upgrade-linux-image-4-15-0-1042-kvmubuntu-upgrade-linux-image-4-15-0-1043-raspi2ubuntu-upgrade-linux-image-4-15-0-1047-awsubuntu-upgrade-linux-image-4-15-0-1050-oemubuntu-upgrade-linux-image-4-15-0-1055-azureubuntu-upgrade-linux-image-4-15-0-1060-snapdragonubuntu-upgrade-linux-image-4-15-0-58-genericubuntu-upgrade-linux-image-4-15-0-58-generic-lpaeubuntu-upgrade-linux-image-4-15-0-58-lowlatencyubuntu-upgrade-linux-image-4-4-0-1050-awsubuntu-upgrade-linux-image-4-4-0-1054-kvmubuntu-upgrade-linux-image-4-4-0-1090-awsubuntu-upgrade-linux-image-4-4-0-1118-raspi2ubuntu-upgrade-linux-image-4-4-0-1122-snapdragonubuntu-upgrade-linux-image-4-4-0-159-genericubuntu-upgrade-linux-image-4-4-0-159-generic-lpaeubuntu-upgrade-linux-image-4-4-0-159-lowlatencyubuntu-upgrade-linux-image-4-4-0-159-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-159-powerpc-smpubuntu-upgrade-linux-image-4-4-0-159-powerpc64-embubuntu-upgrade-linux-image-4-4-0-159-powerpc64-smpubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-4-15ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-16-04ubuntu-upgrade-linux-image-virtual-lts-xenial | Aug 14, 2019 | Aug 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub