UbuntuUSN-6540-1BlueZ vulnerability
6.3 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
36.3%
Releases
- Ubuntu 23.10
- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
Packages
- bluez - Bluetooth tools and daemons
Details
It was discovered that BlueZ did not properly restrict non-bonded devices
from injecting HID events into the input subsystem. This could allow a
physically proximate attacker to inject keystrokes and execute arbitrary
commands whilst the device is discoverable.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.10 | noarch | bluez | < 5.68-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | bluetooth | < 5.68-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | bluez-cups | < 5.68-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | bluez-cups-dbgsym | < 5.68-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | bluez-dbgsym | < 5.68-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | bluez-hcidump | < 5.68-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | bluez-hcidump-dbgsym | < 5.68-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | bluez-meshd | < 5.68-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | bluez-meshd-dbgsym | < 5.68-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | bluez-obexd | < 5.68-0ubuntu1.1 | UNKNOWN |
References
Related
6.3 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
36.3%