Linux Distros Unpatched Vulnerability : CVE-2020-10134

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(222997);
  script_version("1.7");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/01/30");

  script_cve_id("CVE-2020-10134");

  script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2020-10134");

  script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
  script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.

  - Pairing in Bluetooth Core v5.2 and earlier may permit an unauthenticated attacker to acquire credentials
    with two pairing devices via adjacent access when the unauthenticated user initiates different pairing
    methods in each peer device and an end-user erroneously completes both pairing procedures with the MITM
    using the confirmation number of one peer as the passkey of the other. An adjacent, unauthenticated
    attacker could be able to initiate any Bluetooth operation on either attacked device exposed by the
    enabled Bluetooth profiles. This exposure may be limited when the user must authorize certain access
    explicitly, but so long as a user assumes that it is the intended remote device requesting permissions,
    device-local protections may be weakened. (CVE-2020-10134)

Note that Nessus relies on the presence of the package as reported by the vendor.");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2020-10134");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/CVE-2020-10134");
  script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
  script_set_attribute(attribute:"agent", value:"unix");
  script_set_cvss_base_vector("CVSS2#AV:A/AC:M/Au:N/C:P/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:U/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:U/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-10134");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_set_attribute(attribute:"vendor_unpatched", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2020/05/18");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/03/04");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:22.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:24.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:25.04");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:25.10");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:7");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:9");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:bluez");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:bluez");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:bluez-cups");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:bluez-hid2hci");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:bluez-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:bluez-libs-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:bluez-obexd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:bluez");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:bluez-cups");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:bluez-hid2hci");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:bluez-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:bluez-libs-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:bluez-obexd");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("set_linux_os_id.nasl", "ssh_get_info2.nasl");
  script_require_keys("Host/OS/identifier", "Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched");
  script_require_ports("Host/OS/CentOS Linux-7", "Host/OS/CentOS Linux-8", "Host/OS/Red Hat Enterprise Linux-7", "Host/OS/Red Hat Enterprise Linux-8", "Host/OS/Red Hat Enterprise Linux-9", "Host/OS/Ubuntu Linux-16.04", "Host/OS/Ubuntu Linux-18.04", "Host/OS/Ubuntu Linux-20.04", "Host/OS/Ubuntu Linux-22.04", "Host/OS/Ubuntu Linux-24.04", "Host/OS/Ubuntu Linux-25.04", "Host/OS/Ubuntu Linux-25.10");

  exit(0);
}

if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/CentOS/rpm-list")) && empty_or_null(get_one_kb_item("Host/Debian/dpkg-l")) && empty_or_null(get_one_kb_item("Host/RedHat/rpm-list"))) audit(AUDIT_PACKAGE_LIST_MISSING);

include('linux_unpatched.inc');

var distro_constraints_array = {
  "Ubuntu Linux-16.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "16.04",
        "pkgs": [
          {"reference": "bluetooth"},
          {"reference": "bluez"},
          {"reference": "bluez-cups"},
          {"reference": "bluez-dbg"},
          {"reference": "bluez-hcidump"},
          {"reference": "bluez-obexd"},
          {"reference": "bluez-tests"},
          {"reference": "libbluetooth-dev"},
          {"reference": "libbluetooth3"},
          {"reference": "libbluetooth3-dbg"}
        ]
      }
    ]
  },
  "Ubuntu Linux-18.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "18.04",
        "pkgs": [
          {"reference": "bluetooth"},
          {"reference": "bluez"},
          {"reference": "bluez-cups"},
          {"reference": "bluez-dbg"},
          {"reference": "bluez-hcidump"},
          {"reference": "bluez-obexd"},
          {"reference": "bluez-tests"},
          {"reference": "libbluetooth-dev"},
          {"reference": "libbluetooth3"},
          {"reference": "libbluetooth3-dbg"}
        ]
      }
    ]
  },
  "Ubuntu Linux-20.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "20.04",
        "pkgs": [
          {"reference": "bluetooth"},
          {"reference": "bluez"},
          {"reference": "bluez-cups"},
          {"reference": "bluez-dbg"},
          {"reference": "bluez-hcidump"},
          {"reference": "bluez-obexd"},
          {"reference": "bluez-tests"},
          {"reference": "libbluetooth-dev"},
          {"reference": "libbluetooth3"},
          {"reference": "libbluetooth3-dbg"}
        ]
      }
    ]
  },
  "Ubuntu Linux-22.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "22.04",
        "pkgs": [
          {"reference": "bluetooth"},
          {"reference": "bluez"},
          {"reference": "bluez-cups"},
          {"reference": "bluez-hcidump"},
          {"reference": "bluez-meshd"},
          {"reference": "bluez-obexd"},
          {"reference": "bluez-tests"},
          {"reference": "libbluetooth-dev"},
          {"reference": "libbluetooth3"}
        ]
      }
    ]
  },
  "Ubuntu Linux-24.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "24.04",
        "pkgs": [
          {"reference": "bluetooth"},
          {"reference": "bluez"},
          {"reference": "bluez-cups"},
          {"reference": "bluez-hcidump"},
          {"reference": "bluez-meshd"},
          {"reference": "bluez-obexd"},
          {"reference": "bluez-source"},
          {"reference": "bluez-test-scripts"},
          {"reference": "bluez-test-tools"},
          {"reference": "libbluetooth-dev"},
          {"reference": "libbluetooth3"}
        ]
      }
    ]
  },
  "Ubuntu Linux-25.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "25.04",
        "pkgs": [
          {"reference": "bluetooth"},
          {"reference": "bluez"},
          {"reference": "bluez-cups"},
          {"reference": "bluez-hcidump"},
          {"reference": "bluez-meshd"},
          {"reference": "bluez-obexd"},
          {"reference": "bluez-source"},
          {"reference": "bluez-test-scripts"},
          {"reference": "bluez-test-tools"},
          {"reference": "libbluetooth-dev"},
          {"reference": "libbluetooth3"}
        ]
      }
    ]
  },
  "Ubuntu Linux-25.10": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "25.10",
        "pkgs": [
          {"reference": "bluetooth"},
          {"reference": "bluez"},
          {"reference": "bluez-cups"},
          {"reference": "bluez-hcidump"},
          {"reference": "bluez-meshd"},
          {"reference": "bluez-obexd"},
          {"reference": "bluez-source"},
          {"reference": "bluez-test-scripts"},
          {"reference": "bluez-test-tools"},
          {"reference": "libbluetooth-dev"},
          {"reference": "libbluetooth3"}
        ]
      }
    ]
  },
  "CentOS Linux-7": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "7",
        "pkgs": [
          {"reference": "bluez"},
          {"reference": "bluez-cups"},
          {"reference": "bluez-hid2hci"},
          {"reference": "bluez-libs"},
          {"reference": "bluez-libs-devel"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-7": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "7",
        "pkgs": [
          {"reference": "bluez"},
          {"reference": "bluez-cups"},
          {"reference": "bluez-hid2hci"},
          {"reference": "bluez-libs"},
          {"reference": "bluez-libs-devel"}
        ]
      }
    ]
  },
  "CentOS Linux-8": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "8",
        "pkgs": [
          {"reference": "bluez"},
          {"reference": "bluez-cups"},
          {"reference": "bluez-hid2hci"},
          {"reference": "bluez-libs"},
          {"reference": "bluez-libs-devel"},
          {"reference": "bluez-obexd"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-8": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "8",
        "pkgs": [
          {"reference": "bluez"},
          {"reference": "bluez-cups"},
          {"reference": "bluez-hid2hci"},
          {"reference": "bluez-libs"},
          {"reference": "bluez-libs-devel"},
          {"reference": "bluez-obexd"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-9": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "9",
        "pkgs": [
          {"reference": "bluez"},
          {"reference": "bluez-cups"},
          {"reference": "bluez-libs"},
          {"reference": "bluez-libs-devel"},
          {"reference": "bluez-obexd"}
        ]
      }
    ]
  }
};

var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');
var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);

if (!empty_or_null(report))
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : report
  );
  exit(0);
}
else
{
  audit(AUDIT_HOST_NOT, 'affected');
}