RHEL 8 : bluez (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - kernel: Authvalue leak in Bluetooth Mesh Provisioning CVE-2020-26559 - bluez: BlueZ allows physically...

CVE-2020-10134

Pairing in Bluetooth® Core v5.2 and earlier may permit an unauthenticated attacker to acquire credentials with two pairing devices via adjacent access when the unauthenticated user initiates different pairing methods in each peer device and an end-user erroneously completes both pairing procedure...

CVE-2020-10134

CVE-2020-10134 affects Bluetooth Core v5.2 and earlier. The vulnerability arises during pairing when an unauthenticated attacker can perform a man-in-the-middle by exploiting users completing two pairing procedures with the MITM using one peer’s confirmation as the other peer’s passkey. This can ...