CVE-2024-8805

22.11.2024, 21:15

BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25177.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	8.8 HIGH	ADJACENT_NETWORK	LOW	NONE	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
zdi	CNA	8.8 HIGH				CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 53%

Vendor	Product	Version
bluez	bluez	5.77

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	vulnerable
bullseye (security)	vulnerable
bookworm	6.1.137-1 fixed
bookworm (security)	6.1.140-1 fixed
trixie	6.12.27-1 fixed
sid	6.12.30-1 fixed

linux-6.1

bullseye (security)

6.1.137-1~deb11u1

fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

plucky	not-affected
oracular	Fixed 6.11.0-18.18 released
noble	Fixed 6.8.0-54.56 released
jammy	pending
focal	needed
bionic	ignored
xenial	ignored
trusty	ignored

linux-allwinner-5.19

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws

plucky	not-affected
oracular	Fixed 6.11.0-1009.10 released
noble	Fixed 6.8.0-1023.25 released
jammy	needed
focal	needed
bionic	ignored
xenial	ignored
trusty	ignored

linux-aws-5.0

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-aws-5.11

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.13

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	needed
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.19

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.3

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-aws-5.4

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-aws-5.8

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-aws-6.2

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-6.5

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-6.8

plucky	dne
oracular	dne
noble	dne
jammy	Fixed 6.8.0-1023.25~22.04.1 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-fips

plucky	dne
oracular	dne
noble	dne
jammy	needed
focal	needed
bionic	needed
xenial	dne
trusty	dne

linux-aws-hwe

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	dne
xenial	ignored
trusty	dne

linux-azure

plucky	not-affected
oracular	Fixed 6.11.0-1009.9 released
noble	Fixed 6.8.0-1025.30 released
jammy	needed
focal	needed
bionic	ignored
xenial	ignored
trusty	ignored

linux-azure-4.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-azure-5.11

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.13

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	needed
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.19

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.3

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-azure-5.4

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-azure-5.8

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-azure-6.11

plucky	dne
oracular	dne
noble	Fixed 6.11.0-1012.12~24.04.1 released
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-6.2

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-6.5

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-6.8

plucky	dne
oracular	dne
noble	dne
jammy	Fixed 6.8.0-1025.30~22.04.1 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-edge

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-azure-fde

plucky	dne
oracular	dne
noble	dne
jammy	needed
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-5.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	needed
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-5.19

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-6.2

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-fips

plucky	dne
oracular	dne
noble	dne
jammy	needed
focal	needed
bionic	needed
xenial	dne
trusty	dne

linux-azure-nvidia

plucky	dne
oracular	dne
noble	Fixed 6.8.0-1014.15 released
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-bluefield

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	needed
bionic	dne
xenial	dne
trusty	dne

linux-fips

plucky	dne
oracular	dne
noble	dne
jammy	needed
focal	needed
bionic	needed
xenial	needed
trusty	dne

linux-gcp

plucky	not-affected
oracular	Fixed 6.11.0-1009.9 released
noble	Fixed 6.8.0-1024.26 released
jammy	needed
focal	needed
bionic	ignored
xenial	ignored
trusty	dne

linux-gcp-4.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gcp-5.11

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.13

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	needed
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.19

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.3

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gcp-5.4

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gcp-5.8

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gcp-6.11

plucky	dne
oracular	dne
noble	Fixed 6.11.0-1011.11~24.04.1 released
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-6.2

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-6.5

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-6.8

plucky	dne
oracular	dne
noble	dne
jammy	Fixed 6.8.0-1024.26~22.04.1 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-fips

plucky	dne
oracular	dne
noble	dne
jammy	needed
focal	needed
bionic	needed
xenial	dne
trusty	dne

linux-gke

plucky	dne
oracular	dne
noble	Fixed 6.8.0-1019.23 released
jammy	needed
focal	ignored
bionic	dne
xenial	ignored
trusty	dne

linux-gke-4.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-5.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gke-5.4

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gkeop

plucky	dne
oracular	dne
noble	Fixed 6.8.0-1006.8 released
jammy	needed
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gkeop-5.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gkeop-5.4

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-hwe

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	ignored
trusty	dne

linux-hwe-5.11

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.13

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	needed
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.19

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.4

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-hwe-5.8

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.11

plucky	dne
oracular	dne
noble	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.2

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.5

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.8

plucky	dne
oracular	dne
noble	dne
jammy	Fixed 6.8.0-57.59~22.04.1 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-edge

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	ignored
trusty	dne

linux-ibm

plucky	dne
oracular	dne
noble	Fixed 6.8.0-1022.22 released
jammy	needed
focal	needed
bionic	dne
xenial	dne
trusty	dne

linux-ibm-5.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	needed
bionic	dne
xenial	dne
trusty	dne

linux-ibm-5.4

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-intel

plucky	dne
oracular	dne
noble	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-5.13

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-intel-iot-realtime

plucky	dne
oracular	dne
noble	dne
jammy	needed
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-iotg

plucky	dne
oracular	dne
noble	dne
jammy	needed
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-iotg-5.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	needed
bionic	dne
xenial	dne
trusty	dne

linux-iot

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	needed
bionic	dne
xenial	dne
trusty	dne

linux-kvm

plucky	dne
oracular	dne
noble	dne
jammy	needed
focal	needed
bionic	ignored
xenial	ignored
trusty	dne

linux-lowlatency

plucky	dne
oracular	Fixed 6.11.0-1010.11 released
noble	Fixed 6.8.0-54.56.1 released
jammy	needed
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-5.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	needed
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-5.19

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.11

plucky	dne
oracular	dne
noble	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.2

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.5

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.8

plucky	dne
oracular	dne
noble	dne
jammy	Fixed 6.8.0-54.56.1~22.04.1 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lts-xenial

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	ignored

linux-nvidia

plucky	dne
oracular	dne
noble	Fixed 6.8.0-1022.25 released
jammy	needed
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.2

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.5

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.8

plucky	dne
oracular	dne
noble	dne
jammy	Fixed 6.8.0-1022.25~22.04.2 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-lowlatency

plucky	dne
oracular	dne
noble	Fixed 6.8.0-1022.25.2 released
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-tegra

plucky	dne
oracular	dne
noble	not-affected
jammy	needed
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-tegra-igx

plucky	dne
oracular	dne
noble	dne
jammy	needed
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	ignored
trusty	dne

linux-oem-5.10

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.13

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.14

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.17

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.6

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.0

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.1

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.11

plucky	dne
oracular	dne
noble	Fixed 6.11.0-1015.15 released
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.5

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.8

plucky	dne
oracular	dne
noble	Fixed 6.8.0-1024.24 released
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oracle

plucky	not-affected
oracular	Fixed 6.11.0-1011.12 released
noble	Fixed 6.8.0-1020.21 released
jammy	needed
focal	needed
bionic	ignored
xenial	ignored
trusty	dne

linux-oracle-5.0

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle-5.11

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.13

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	needed
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.3

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle-5.4

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle-5.8

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oracle-6.5

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oracle-6.8

plucky	dne
oracular	dne
noble	dne
jammy	Fixed 6.8.0-1020.21~22.04.1 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-raspi

plucky	not-affected
oracular	Fixed 6.11.0-1008.8 released
noble	Fixed 6.8.0-1019.23 released
jammy	needed
focal	needed
bionic	dne
xenial	dne
trusty	dne

linux-raspi-5.4

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-raspi-realtime

plucky	dne
oracular	dne
noble	Fixed 6.8.0-2018.19 released
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-raspi2

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	ignored
xenial	ignored
trusty	dne

linux-realtime

plucky	not-affected
oracular	Fixed 6.11.0-1005.5 released
noble	Fixed 6.8.1-1016.17 released
jammy	needed
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv

plucky	not-affected
oracular	Fixed 6.11.0-17.17.1 released
noble	Fixed 6.8.0-53.55.1 released
jammy	ignored
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.11

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.15

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	needed
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.19

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.8

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-riscv-6.5

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv-6.8

plucky	dne
oracular	dne
noble	dne
jammy	Fixed 6.8.0-53.55.1~22.04.1 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-5.19

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-6.2

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-6.5

plucky	dne
oracular	dne
noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-xilinx-zynqmp

plucky	dne
oracular	dne
noble	dne
jammy	needed
focal	needed
bionic	dne
xenial	dne
trusty	dne

Common Weakness Enumeration

CWE-284 - Improper Access Control
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References

https://www.zerodayinitiative.com/advisories/ZDI-24-1229/