CVE-2023-45866

08.12.2023, 06:15

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.3 MEDIUM	ADJACENT_NETWORK	LOW	NONE	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 96%

Vendor	Product	Version
google	android	4.2.2
google	android	6.0.1
google	android	10.0
google	android	11.0
google	android	13.0
google	android	14.0
canonical	ubuntu_linux	18.04
canonical	ubuntu_linux	20.04
canonical	ubuntu_linux	22.04
canonical	ubuntu_linux	23.10
apple	iphone_os	16.6
apple	macos	12.6.7
apple	macos	13.3.3
apple	ipados	𝑥 < 17.2
apple	iphone_os	𝑥 < 17.2
apple	macos	14.0 ≤ 𝑥 < 14.2
debian	debian_linux	10.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

bluez

bullseye	5.55-3.1+deb11u1 fixed
bullseye (security)	5.55-3.1+deb11u2 fixed
bookworm	5.66-1+deb12u2 fixed
bookworm (security)	5.66-1+deb12u1 fixed
sid	5.79-1 fixed
trixie	5.79-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

bluez

noble	Fixed 5.70-0ubuntu3 released
mantic	Fixed 5.68-0ubuntu1.1 released
lunar	Fixed 5.66-0ubuntu1.1 released
jammy	Fixed 5.64-0ubuntu1.1 released
focal	Fixed 5.53-0ubuntu3.7 released
bionic	Fixed 5.48-0ubuntu3.9+esm1 released
xenial	Fixed 5.37-0ubuntu5.3+esm3 released
trusty	ignored