SUSE-SU-2020:2134-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth may have allowed an unauthenticated user to complete authentication...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:2105-1)

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-19462: relayopen in kernel/relay.c in the Linux kernel allowed local users to cause a denial of service such as relay blockage by triggering a NULL...

SUSE-SU-2020:2105-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-19462: relayopen in kernel/relay.c in the Linux kernel allowed local users to cause a denial of service such as relay blockage by triggering a NULL...

Exploit for Incorrect Calculation in Google Android

BluefragCVE-2020-0022 This is a RCE bluetooth vulnerability o...

The vulnerability of the Bluetooth service in Microsoft Windows operating systems is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application.

The vulnerability of the Bluetooth service in Microsoft Windows operating systems is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...

About the security content of macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

CVE-2020-1835

HUAWEI Mate 30 with versions earlier than 10.1.0.126C00E125R5P3 have an information disclosure vulnerability. A logic judgment error occurs when the system handling Bluetooth connections, an attacker could craft as an authenticated Bluetooth peer to launch the attack. Successful exploit could cau...

CVE-2020-0196

In RegisterNotificationResponse::GetEvent of registernotificationpacket.cc, there is a possible abort due to improper input validation. This could lead to remote denial of service of the Bluetooth service, over Bluetooth, with no additional execution privileges needed. User interaction is not...

Out-of-bounds

In getelementattrrsp of btifrc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if bluetoothtbd were used, which it isn't in typical Android platforms, with no additional execution privileges needed. User interaction is not needed...

Apple iOS and Apple iPadOS Bluetooth Component Buffer Overflow Vulnerability

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer.Bluetooth is one of the Bluetooth components. A buffer overflow vulnerability exists in the Bluetooth component...

CVE-2020-5589

SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing and operate such as...

Apple macOS Catalina Bluetooth component buffer overflow vulnerability (CNVD-2020-34637)

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.Bluetooth is one of the Bluetooth components. A buffer overflow vulnerability exists in the Bluetooth component in Apple macOS Catalina versions prior to 10.15.5. An attacker could exploit this vulnerabili...

UBUNTU-CVE-2020-10135

Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth...

New Bluetooth Vulnerability Exposes Billions of Devices to Hackers

Academics from École Polytechnique Fédérale de Lausanne EPFL disclosed a security vulnerability in Bluetooth that could potentially allow an attacker to spoof a remotely paired device, exposing over a billion of modern devices to hackers. The attacks, dubbed Bluetooth Impersonation AttackS or BIA...

COVIDSafe app input validation error vulnerability

COVIDSafe app is an Australian coronavirus contact tracing app. A security vulnerability exists in versions 1.0 and 1.1 of the COVIDSafe app for IOS-based systems. A remote attacker could exploit the vulnerability by sending specially crafted advertisements via Bluetooth to cause the app to crash...

USN-4351-1 linux-firmware vulnerability

Eli Biham and Lior Neumann discovered that certain Bluetooth devices incorrectly validated key exchange parameters. An attacker could possibly use this issue to obtain sensitive information...

Scientific Linux Security Update : bluez on SL7.x x86_64 (20200407)

bluez: failure in disabling Bluetooth discoverability in certain cases may lead to the unauthorized pairing of Bluetooth devices C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135802; scriptversion"1.3";...

Apple macOS Catalina Bluetooth Component Memory Corruption Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.Bluetooth is one of the Bluetooth components. A memory corruption vulnerability exists in the Bluetooth component of Apple macOS Catalina versions prior to 10.15.4. An attacker can exploit this vulnerabili...

Apple macOS Catalina Bluetooth component buffer overflow vulnerability (CNVD-2020-23212)

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.Bluetooth is one of the Bluetooth components. A buffer overflow vulnerability in the Bluetooth component in Apple macOS Catalina versions prior to 10.15.4 can be exploited by a local attacker to cause an...

Apple iOS and iPadOS Bluetooth Component Logic Issue Vulnerability

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer.Bluetooth is one of the Bluetooth components. A security vulnerability exists in the Bluetooth component of App...