Логотип exploitDog
bind:CVE-2023-45866
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-45866

Количество 12

Количество 12

ubuntu логотип

CVE-2023-45866

около 2 лет назад

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

CVSS3: 6.3
EPSS: Средний
redhat логотип

CVE-2023-45866

около 2 лет назад

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

CVSS3: 6.3
EPSS: Средний
nvd логотип

CVE-2023-45866

около 2 лет назад

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

CVSS3: 6.3
EPSS: Средний
msrc логотип

CVE-2023-45866

около 1 года назад

CVSS3: 6.3
EPSS: Средний
debian логотип

CVE-2023-45866

около 2 лет назад

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral ...

CVSS3: 6.3
EPSS: Средний
suse-cvrf логотип

SUSE-SU-2025:03590-1

3 месяца назад

Security update for bluez

EPSS: Средний
github логотип

GHSA-qjcj-xg77-6c32

около 2 лет назад

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

CVSS3: 8.8
EPSS: Средний
oracle-oval логотип

ELSA-2024-11154

около 1 года назад

ELSA-2024-11154: bluez security update (MODERATE)

EPSS: Низкий
fstec логотип

BDU:2023-08562

больше 2 лет назад

Уязвимость интерфейса HID Profile (Human Interface Device) стека протоколов Bluetooth для ОС Linux BlueZ, позволяющая нарушителю повысить свои привилегии и выполнить произвольные команды

CVSS3: 8.8
EPSS: Средний
redos логотип

ROS-20240408-06

почти 2 года назад

Уязвимость bluez

CVSS3: 8.8
EPSS: Средний
rocky логотип

RLSA-2024:9413

10 месяцев назад

Moderate: bluez security update

EPSS: Низкий
oracle-oval логотип

ELSA-2024-9413

около 1 года назад

ELSA-2024-9413: bluez security update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-45866

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

CVSS3: 6.3
35%
Средний
около 2 лет назад
redhat логотип
CVE-2023-45866

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

CVSS3: 6.3
35%
Средний
около 2 лет назад
nvd логотип
CVE-2023-45866

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

CVSS3: 6.3
35%
Средний
около 2 лет назад
msrc логотип
CVSS3: 6.3
35%
Средний
около 1 года назад
debian логотип
CVE-2023-45866

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral ...

CVSS3: 6.3
35%
Средний
около 2 лет назад
suse-cvrf логотип
SUSE-SU-2025:03590-1

Security update for bluez

35%
Средний
3 месяца назад
github логотип
GHSA-qjcj-xg77-6c32

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

CVSS3: 8.8
35%
Средний
около 2 лет назад
oracle-oval логотип
ELSA-2024-11154

ELSA-2024-11154: bluez security update (MODERATE)

около 1 года назад
fstec логотип
BDU:2023-08562

Уязвимость интерфейса HID Profile (Human Interface Device) стека протоколов Bluetooth для ОС Linux BlueZ, позволяющая нарушителю повысить свои привилегии и выполнить произвольные команды

CVSS3: 8.8
35%
Средний
больше 2 лет назад
redos логотип
ROS-20240408-06

Уязвимость bluez

CVSS3: 8.8
35%
Средний
почти 2 года назад
rocky логотип
RLSA-2024:9413

Moderate: bluez security update

10 месяцев назад
oracle-oval логотип
ELSA-2024-9413

ELSA-2024-9413: bluez security update (MODERATE)

около 1 года назад

Уязвимостей на страницу