CVE-2019-9506
EUVD-2019-1888014.08.2019, 17:15
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| android | - | |
| apple | iphone_os | 12.4 |
| apple | mac_os_x | 10.12.6 |
| apple | mac_os_x | 10.13.6 |
| apple | mac_os_x | 10.14.5 |
| apple | tvos | 12.4 |
| apple | watchos | 5.3 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 19.04 |
| debian | debian_linux | 8.0 |
| opensuse | leap | 15.0 |
| opensuse | leap | 15.1 |
| redhat | mrg_realtime | 2.0 |
| redhat | virtualization_host_eus | 4.2 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux_aus | 7.5 |
| redhat | enterprise_linux_eus | 7.6 |
| redhat | enterprise_linux_eus | 7.7 |
| redhat | enterprise_linux_eus | 8.1 |
| redhat | enterprise_linux_eus | 8.2 |
| redhat | enterprise_linux_eus | 8.4 |
| redhat | enterprise_linux_for_real_time_eus | 8.2 |
| redhat | enterprise_linux_for_real_time_eus | 8.4 |
| redhat | enterprise_linux_for_real_time_for_nfv_eus | 8.2 |
| redhat | enterprise_linux_for_real_time_for_nfv_eus | 8.4 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_server_aus | 7.3 |
| redhat | enterprise_linux_server_aus | 7.4 |
| redhat | enterprise_linux_server_aus | 7.6 |
| redhat | enterprise_linux_server_aus | 7.7 |
| redhat | enterprise_linux_server_aus | 8.2 |
| redhat | enterprise_linux_server_aus | 8.4 |
| redhat | enterprise_linux_server_tus | 7.3 |
| redhat | enterprise_linux_server_tus | 7.4 |
| redhat | enterprise_linux_server_tus | 7.6 |
| redhat | enterprise_linux_server_tus | 7.7 |
| redhat | enterprise_linux_server_tus | 8.2 |
| redhat | enterprise_linux_server_tus | 8.4 |
| redhat | enterprise_linux_tus | 7.6 |
| huawei | alp-al00b_firmware | 𝑥 < 9.1.0.333\(c00e333r2p1t8\) |
| huawei | ares-al00b_firmware | 𝑥 < 9.1.0.160\(c00e160r2p5t8\) |
| huawei | ares-al10d_firmware | 𝑥 < 9.1.0.160\(c00e160r2p5t8\) |
| huawei | ares-tl00c_firmware | 𝑥 < 9.1.0.165\(c01e165r2p5t8\) |
| huawei | asoka-al00ax_firmware | 𝑥 < 9.1.1.181\(c00e48r6p1\) |
| huawei | atomu-l33_firmware | 𝑥 < 8.0.0.147\(c605custc605d1\) |
| huawei | atomu-l41_firmware | 𝑥 < 8.0.0.153\(c461custc461d1\) |
| huawei | atomu-l42_firmware | 𝑥 < 8.0.0.155\(c636custc636d1\) |
| huawei | bla-al00b_firmware | 𝑥 < 9.1.0.329\(c786e320r2p1t8\) |
| huawei | bla-l29c_firmware | 𝑥 < 9.1.0.300\(c605e2r1p12t8\) |
| huawei | bla-tl00b_firmware | 𝑥 < 9.1.0.329\(c01e320r1p1t8\) |
| huawei | barca-al00_firmware | 𝑥 < 8.0.0.366\(c00\) |
| huawei | berkeley-al20_firmware | 𝑥 < 9.1.0.333\(c00e333r2p1t8\) |
| huawei | berkeley-l09_firmware | 𝑥 < 9.1.0.332\(c432e5r1p13t8\) |
| huawei | berkeley-tl10_firmware | 𝑥 < 9.1.0.333\(c01e333r1p1t8\) |
| huawei | charlotte-l29c_firmware | 𝑥 < 9.1.0.311\(c605e2r1p11t8\) |
| huawei | columbia-al10b_firmware | 𝑥 < 9.1.0.333\(c00e333r1p1t8\) |
| huawei | columbia-al10i_firmware | 𝑥 < 9.1.0.335\(c675e8r1p9t8\) |
| huawei | columbia-l29d_firmware | 𝑥 < 9.1.0.350\(c10e5r1p14t8\) |
| huawei | columbia-tl00d_firmware | 𝑥 < 8.1.0.186\(c01gt\) |
| huawei | cornell-al00a_firmware | 𝑥 < 9.1.0.333\(c00e333r1p1t8\) |
| huawei | cornell-al00i_firmware | 𝑥 < 9.1.0.363\(c675e3r1p9t8\) |
| huawei | cornell-al00ind_firmware | 𝑥 < 8.2.0.141\(c675custc675d1gt\) |
| huawei | cornell-al10ind_firmware | 𝑥 < 9.1.0.363\(c675e2r1p9t8\) |
| huawei | cornell-l29a_firmware | 𝑥 < 9.1.0.336\(c636e2r1p12t8\) |
| huawei | cornell-tl10b_firmware | 𝑥 < 9.1.0.333\(c01e333r1p1t8\) |
| huawei | dubai-al00a_firmware | 𝑥 < 8.2.0.190\(c00r2p2\) |
| huawei | dura-al00a_firmware | 𝑥 < 1.0.0.182\(c00\) |
| huawei | dura-tl00a_firmware | 𝑥 < 1.0.0.176\(c01\) |
| huawei | emily-l29c_firmware | 8.1.0.156\(c605\) |
| huawei | ever-l29b_firmware | 𝑥 < 9.1.0.338\(c185e3r3p1\) |
| huawei | figo-l23_firmware | 𝑥 < 9.1.0.160\(c605e6r1p5t8\) |
| huawei | figo-l31_firmware | 8.0.0.122d\(c652\):d |
| huawei | figo-tl10b_firmware | 𝑥 < 9.1.0.130\(c01e115r2p8t8\) |
| huawei | florida-al20b_firmware | 𝑥 < 9.1.0.128\(c00e112r1p6t8\) |
| huawei | florida-l21_firmware | 𝑥 < 9.1.0.150\(c185e6r1p5t8\) |
| huawei | florida-l22_firmware | 𝑥 < 9.1.0.150\(c636e6r1p5t8\) |
| huawei | florida-l23_firmware | 𝑥 < 9.1.0.154\(c605e7r1p2t8\) |
| huawei | florida-tl10b_firmware | 𝑥 < 9.1.0.128\(c01e112r1p6t8\) |
| huawei | honor_20_firmware | 𝑥 < 9.1.0.143\(c675e8r2p1\) |
| huawei | honor_20_pro_firmware | 𝑥 < 9.1.0.154\(c185e2r5p1\) |
| huawei | mate_20_firmware | - |
| huawei | mate_20_pro_firmware | - |
| huawei | mate_20_x_firmware | - |
| huawei | p_smart_firmware | - |
| huawei | p_smart_2019_firmware | - |
| huawei | p20_firmware | - |
| huawei | p20_pro_firmware | - |
| huawei | p30_firmware | - |
| huawei | p30_pro_firmware | - |
| huawei | y5_2018_firmware | - |
| huawei | y5_lite_firmware | - |
| huawei | y6_2019_firmware | - |
| huawei | y6_prime_2018_firmware | - |
| huawei | y6_pro_2019_firmware | - |
| huawei | y7_2019_firmware | - |
| huawei | y9_2019_firmware | - |
| huawei | nova_3_firmware | - |
| huawei | nova_4_firmware | - |
| huawei | nova_5_firmware | - |
| huawei | nova_5i_pro_firmware | - |
| huawei | nova_lite_3_firmware | - |
| huawei | harry-al00c_firmware | - |
| huawei | harry-al10b_firmware | - |
| huawei | harry-tl00c_firmware | - |
| huawei | hima-l29c_firmware | - |
| huawei | honor_10_lite_firmware | - |
| huawei | honor_8a_firmware | - |
| huawei | honor_8x_firmware | - |
| huawei | honor_view_10_firmware | - |
| huawei | honor_view_20_firmware | - |
| huawei | jakarta-al00a_firmware | - |
| huawei | johnson-tl00d_firmware | - |
| huawei | johnson-tl00f_firmware | - |
| huawei | katyusha-al00a_firmware | - |
| huawei | laya-al00ep_firmware | - |
| huawei | leland-l21a_firmware | - |
| huawei | leland-l31a_firmware | - |
| huawei | leland-l32a_firmware | - |
| huawei | leland-l32c_firmware | - |
| huawei | leland-l42a_firmware | - |
| huawei | leland-l42c_firmware | - |
| huawei | leland-tl10b_firmware | - |
| huawei | leland-tl10c_firmware | - |
| huawei | lelandp-al00c_firmware | - |
| huawei | lelandp-al10b_firmware | - |
| huawei | lelandp-al10d_firmware | - |
| huawei | lelandp-l22a_firmware | - |
| huawei | lelandp-l22c_firmware | - |
| huawei | lelandp-l22d_firmware | - |
| huawei | london-al40ind_firmware | - |
| huawei | madrid-al00a_firmware | - |
| huawei | madrid-tl00a_firmware | - |
| huawei | neo-al00d_firmware | - |
| huawei | paris-al00ic_firmware | - |
| huawei | paris-l21b_firmware | - |
| huawei | paris-l21meb_firmware | - |
| huawei | paris-l29b_firmware | - |
| huawei | potter-al00c_firmware | - |
| huawei | potter-al10a_firmware | - |
| huawei | princeton-al10b_firmware | - |
| huawei | princeton-al10d_firmware | - |
| huawei | princeton-tl10c_firmware | - |
| huawei | sydney-al00_firmware | - |
| huawei | sydney-l21_firmware | - |
| huawei | sydney-l21br_firmware | - |
| huawei | sydney-l22_firmware | - |
| huawei | sydney-l22br_firmware | - |
| huawei | sydney-tl00_firmware | - |
| huawei | sydneym-al00_firmware | - |
| huawei | sydneym-l01_firmware | - |
| huawei | sydneym-l03_firmware | - |
| huawei | sydneym-l21_firmware | - |
| huawei | sydneym-l22_firmware | - |
| huawei | sydneym-l23_firmware | - |
| huawei | tony-al00b_firmware | - |
| huawei | tony-tl00b_firmware | - |
| huawei | yale-al00a_firmware | - |
| huawei | yale-al50a_firmware | - |
| huawei | yale-l21a_firmware | - |
| huawei | yale-l61c_firmware | - |
| huawei | yale-tl00b_firmware | - |
| huawei | yalep-al10b_firmware | - |
| huawei | imanager_neteco_firmware | - |
| huawei | imanager_neteco_6000_firmware | - |
| huawei | bla-l29c_firmware | 𝑥 < 9.1.0.306\(c185e2r1p13t8\) |
| huawei | bla-l29c_firmware | 𝑥 < 9.1.0.306\(c432e4r1p11t8\) |
| huawei | bla-l29c_firmware | 𝑥 < 9.1.0.306\(c636e2r1p13t8\) |
| huawei | bla-l29c_firmware | 𝑥 < 9.1.0.307\(c635e4r1p13t8\) |
| huawei | berkeley-l09_firmware | 𝑥 < 9.1.0.350\(c10e3r1p14t8\) |
| huawei | berkeley-l09_firmware | 𝑥 < 9.1.0.350\(c636e4r1p13t8\) |
| huawei | charlotte-l29c_firmware | 𝑥 < 9.1.0.325\(c185e4r1p11t8\) |
| huawei | charlotte-l29c_firmware | 𝑥 < 9.1.0.325\(c636e2r1p12t8\) |
| huawei | charlotte-l29c_firmware | 𝑥 < 9.1.0.328\(c432e5r1p9t8\) |
| huawei | charlotte-l29c_firmware | 𝑥 < 9.1.0.328\(c782e10r1p9t8\) |
| huawei | columbia-l29d_firmware | 𝑥 < 9.1.0.350\(c185e3r1p12t8\) |
| huawei | columbia-l29d_firmware | 𝑥 < 9.1.0.350\(c461e3r1p11t8\) |
| huawei | columbia-l29d_firmware | 𝑥 < 9.1.0.350\(c636e3r1p13t8\) |
| huawei | columbia-l29d_firmware | 𝑥 < 9.1.0.351\(c432e5r1p13t8\) |
| huawei | cornell-l29a_firmware | 𝑥 < 9.1.0.341\(c185e1r1p9t8\) |
| huawei | cornell-l29a_firmware | 𝑥 < 9.1.0.342\(c461e1r1p9t8\) |
| huawei | cornell-l29a_firmware | 𝑥 < 9.1.0.347\(c432e1r1p9t8\) |
| huawei | emily-l29c_firmware | 𝑥 < 9.1.0.311\(c461e2r1p11t8\) |
| huawei | emily-l29c_firmware | 𝑥 < 9.1.0.325\(c185e2r1p12t8\) |
| huawei | emily-l29c_firmware | 𝑥 < 9.1.0.325\(c636e7r1p13t8\) |
| huawei | emily-l29c_firmware | 𝑥 < 9.1.0.326\(c635e2r1p11t8\) |
| huawei | emily-l29c_firmware | 𝑥 < 9.1.0.328\(c432e7r1p11t8\) |
| huawei | figo-l31_firmware | 𝑥 < 9.1.0.122\(c09e7r1p5t8\) |
| huawei | figo-l31_firmware | 𝑥 < 9.1.0.137\(c33e8r1p5t8\) |
| huawei | figo-l31_firmware | 𝑥 < 9.1.0.137\(c530e8r1p5t8\) |
| huawei | figo-l31_firmware | 𝑥 < 9.1.0.158\(c432e8r1p5t8\) |
| huawei | figo-l31_firmware | 𝑥 < 9.1.0.165\(c10e8r1p5t8\) |
| huawei | florida-l21_firmware | 𝑥 < 9.1.0.150\(c432e6r1p5t8\) |
| huawei | honor_20_firmware | 𝑥 < 9.1.0.149\(c675e8r2p1\) |
| huawei | honor_20_pro_firmware | 𝑥 < 9.1.0.154\(c185e2r5p1\) |
| huawei | honor_20_pro_firmware | 𝑥 < 9.1.0.154\(c432e2r5p1\) |
| huawei | honor_20_pro_firmware | 𝑥 < 9.1.0.154\(c636e2r3p1\) |
| huawei | honor_20_pro_firmware | 𝑥 < 9.1.0.155\(c10e2r3p1\) |
| huawei | honor_20_pro_firmware | 𝑥 < 9.1.0.170\(c185e2r5p1\) |
| huawei | honor_20_pro_firmware | 𝑥 < 9.1.0.170\(c636e2r3p1\) |
| huawei | honor_20_pro_firmware | 𝑥 < 9.1.0.171\(c10e2r3p1\) |
| huawei | honor_20_pro_firmware | 𝑥 < 9.1.0.172\(c432e2r5p1\) |
𝑥
= Vulnerable software versions
Windows Releases
Platform | Version | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Windows 10 |
| ||||||||||||||
| Windows 7 |
| ||||||||||||||
| Windows 8.1 |
| ||||||||||||||
| Windows RT 8.1 |
| ||||||||||||||
| Windows Server |
| ||||||||||||||
| Windows Server 2008 R2 |
| ||||||||||||||
| Windows Server 2012 |
| ||||||||||||||
| Windows Server 2012 R2 |
| ||||||||||||||
| Windows Server 2016 |
| ||||||||||||||
| Windows Server 2019 |
|
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| linux |
| ||||||||||||
| linux-aws |
| ||||||||||||
| linux-aws-5.0 |
| ||||||||||||
| linux-aws-hwe |
| ||||||||||||
| linux-azure |
| ||||||||||||
| linux-azure-5.3 |
| ||||||||||||
| linux-azure-edge |
| ||||||||||||
| linux-gcp |
| ||||||||||||
| linux-gcp-5.3 |
| ||||||||||||
| linux-gcp-edge |
| ||||||||||||
| linux-gke-4.15 |
| ||||||||||||
| linux-gke-5.0 |
| ||||||||||||
| linux-gke-5.3 |
| ||||||||||||
| linux-hwe |
| ||||||||||||
| linux-hwe-edge |
| ||||||||||||
| linux-kvm |
| ||||||||||||
| linux-lts-trusty |
| ||||||||||||
| linux-lts-xenial |
| ||||||||||||
| linux-oem |
| ||||||||||||
| linux-oem-5.6 |
| ||||||||||||
| linux-oem-osp1 |
| ||||||||||||
| linux-oracle |
| ||||||||||||
| linux-oracle-5.0 |
| ||||||||||||
| linux-oracle-5.3 |
| ||||||||||||
| linux-raspi2 |
| ||||||||||||
| linux-raspi2-5.3 |
| ||||||||||||
| linux-snapdragon |
|
Common Weakness Enumeration
References