Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64kUpgrade bpftoolUpgrade kernel-64k-debugUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-debugUpgrade kernel-64k-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-64k-debug-develUpgrade kernel-uki-virtUpgrade rvUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade libperfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-rt-debug-devel | May 31, 2024 | Nov 28, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 28, 2023 |
| Msft | — | 2023-11 Cumulative Update for Microsoft Windows 11, version 22H2 (KB5032190)2023-11 Cumulative Update for Microsoft Windows 11, version 21H2 (KB5032192)2023-11 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5032196)2023-11 Cumulative Update for Microsoft Windows 10, version 21H2 (KB5032189)2023-11 Cumulative Update for Microsoft Windows 10, version 1809 (KB5032196)2023-11 Cumulative Update for Microsoft Windows Server 2022, version 23H2 (KB5032202)2023-11 Cumulative Update for Microsoft Windows 10, version 22H2 (KB5032189)2023-11 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5032198)2023-11 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5032198)2023-11 Cumulative Update for Microsoft Windows 11, version 23H2 (KB5032190) | Nov 14, 2023 | Nov 14, 2023 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Dec 2, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 23, 2024 | Nov 28, 2023 |
| Rocky_linux | — | Upgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-debug-kvm | Jun 17, 2024 | Nov 28, 2023 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-debugUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade kernel-azure-baseUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade dtb-amazonUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade kernel-docsUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade dtb-allwinnerUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade kernel-preemptUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade dtb-alteraUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade dtb-armUpgrade dtb-exynosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdso | Jul 10, 2024 | Nov 28, 2023 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1130-oracleUpgrade linux-image-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-4.4.0-1130-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1122-oracleUpgrade linux-image-5.15.0-1057-kvmUpgrade linux-image-5.15.0-105-genericUpgrade linux-image-5.15.0-1043-gkeopUpgrade linux-image-5.15.0-105-lowlatencyUpgrade linux-image-5.4.0-1042-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1057-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1035-iotUpgrade linux-image-5.15.0-1055-intel-iotgUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-224-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1128-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-253-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-105-generic-lpaeUpgrade linux-image-5.15.0-1053-raspiUpgrade linux-image-5.15.0-105-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1053-ibmUpgrade linux-image-5.15.0-105-generic-64kUpgrade linux-image-4.15.0-1161-gcpUpgrade linux-image-5.15.0-1060-awsUpgrade linux-image-5.4.0-1123-awsUpgrade linux-image-5.4.0-1107-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1058-gcpUpgrade linux-image-intelUpgrade linux-image-virtualUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1061-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1083-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1167-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-177-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1053-nvidiaUpgrade linux-image-aws-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1127-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1058-oracleUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-intel-iotgUpgrade linux-image-4.15.0-224-lowlatencyUpgrade linux-image-5.15.0-1061-azureUpgrade linux-image-5.4.0-177-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1053-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-5.4.0-1070-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.4.0-1168-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-177-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-hweUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1058-awsUpgrade linux-image-5.4.0-1090-gkeopUpgrade linux-image-4.4.0-1131-kvmUpgrade linux-image-4.4.0-253-genericUpgrade linux-image-4.15.0-1151-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04dUpgrade linux-image-oemUpgrade linux-image-5.4.0-1111-kvmUpgrade linux-image-4.15.0-1176-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04 | Apr 22, 2024 | Nov 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub