bluffs

BLUFFS 简介 本仓库包含与 BLUFFS：蓝牙前向与未来保密性攻击与防御 相关的代码。 论文摘要 蓝牙是一种无处不在的无线通信技术。数十亿台设备在敏感应用中使用它，并交换私有数据。蓝牙的安全性取决于蓝牙标准及其两种安全机制：配对和会话建立。此前没有任何工作（包括标准本身）分析过这些机制的未来和前向保密性保证，例如，当攻击者攻破当前会话时，蓝牙配对和会话建立能否保护过去和未来的会话。为了弥补这一空白，我们提出了六种新颖的攻击，统称为 BLUFFS...

Design/Logic Flaw

In btifdmauthcmplevt of btifdm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth Standard. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20361

CVE-2022-20361 describes a vulnerability in Android Bluetooth stack (btif_dm_auth_cmpl_evt in btif_dm.cc) related to Cross-Transport Key Derivation. Root cause is a weakness in the Bluetooth protocol implementation, enabling remote elevation of privilege with no user interaction. Affected product...

ASB-A-231161832

In btifdmauthcmplevt of btifdm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth Standard. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Bluetooth 竞争条件问题漏洞

Bluetooth is a Bluetooth Special Interest Group SIG standards organization standard for short-range wireless technology for exchanging data between fixed and mobile devices over short distances using UHF radio waves in the ISM band from 2.402 GHz to 2.48 GHz, and for building personal area networ...