Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2018-10910
HistoryJul 24, 2018 - 12:00 a.m.

CVE-2018-10910

2018-07-2400:00:00
ubuntu.com
ubuntu.com
8

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

4.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

0.0004 Low

EPSS

Percentile

12.9%

JSON

A bug in Bluez may allow for the Bluetooth Discoverable state being set to
on when no Bluetooth agent is registered with the system. This situation
could lead to the unauthorized pairing of certain Bluetooth devices without
any form of authentication. Versions before bluez 5.51 are vulnerable.

Bugs

Notes

Author Note
mdeslaur actual bug in bluez, but there is a work-around in gnome-bluetooth https://gitlab.gnome.org/GNOME/gnome-bluetooth/commit/6b5086d42ea64d46277f3c93b43984f331d12f89 gnome-bluetooth <=3.26 used synchronous d-bus calls, so the issue doesn’t present itself the bluez patches add new functionnality that newer versions of gnome-bluetooth can use to fix this issue. Since the workaround was applied to gnome-bluetooth, we aren’t going to add these commits to bluez. Marking as ignored.
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchgnome-bluetooth< 3.28.0-2ubuntu0.1UNKNOWN

Related

prion 1
redhat 2
ubuntu 1
cve 1
oraclelinux 2
redhatcve 1
nessus 10
centos 1
cvelist 1
nvd 1
debiancve 1
osv 1
veracode 1
openvas 2
mageia 1
prion
prion
Authentication flaw
2019-01-28 15:29:00
redhat
redhat
(RHSA-2020:1101) Low: bluez security update
2020-03-31 09:18:51
(RHSA-2020:1912) Low: bluez security update
2020-04-28 09:29:48
ubuntu
ubuntu
GNOME Bluetooth vulnerability
2019-01-14 00:00:00
cve
cve
CVE-2018-10910
2019-01-28 15:29:00
oraclelinux
oraclelinux
bluez security update
2020-04-06 00:00:00
bluez security update
2020-05-05 00:00:00
redhatcve
redhatcve
CVE-2018-10910
2018-07-23 00:49:08
nessus
nessus
RHEL 7 : bluez (RHSA-2020:1101)
2020-03-31 00:00:00
CentOS 8 : bluez (CESA-2020:1912)
2021-02-01 00:00:00
RHEL 8 : bluez (RHSA-2020:1912)
2020-04-28 00:00:00
centos
centos
bluez security update
2020-04-08 17:46:42
cvelist
cvelist
CVE-2018-10910
2019-01-28 15:00:00
nvd
nvd
CVE-2018-10910
2019-01-28 15:29:00
debiancve
debiancve
CVE-2018-10910
2019-01-28 15:29:00
osv
osv
CVE-2018-10910
2019-01-28 15:29:00
veracode
veracode
Authorization Bypass
2020-04-01 00:38:35
openvas
openvas
Ubuntu: Security Advisory (USN-3856-1)
2019-01-15 00:00:00
Mageia: Security Advisory (MGASA-2020-0152)
2022-01-28 00:00:00
mageia
mageia
Updated bluez packages fix security vulnerabilities
2020-04-03 01:48:49

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

4.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

0.0004 Low

EPSS

Percentile

12.9%

JSON
Related for UB:CVE-2018-10910
prion1redhat2ubuntu1cve1oraclelinux2redhatcve1nessus10centos1cvelist1nvd1debiancve1osv1veracode1openvas2mageia1