Поиск уязвимостей
Количество 40
Количество 40
BDU:2021-05198
Уязвимость спецификации Bluetooth Core Specification ядра операционной системы Linux, связанная с недостатками процедуры аутентификации, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность
CVE-2020-26558
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.
CVE-2020-26558
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.
CVE-2020-26558
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.
CVE-2020-26558
CVE-2020-26558
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification ...
GHSA-7g33-jchx-2fjc
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.
ELSA-2021-4432
ELSA-2021-4432: bluez security update (MODERATE)
openSUSE-SU-2021:2291-1
Security update for bluez
SUSE-SU-2021:2291-1
Security update for bluez
ALT-PU-2021-2616
ALT-PU-2021-2616: package `kernel-image-un-def` update to version 5.13.9-alt1
ALT-PU-2021-2486
ALT-PU-2021-2486: package `kernel-image-un-def` update to version 5.13.9-alt1
openSUSE-SU-2021:2202-1
Security update for the Linux Kernel
openSUSE-SU-2021:2184-1
Security update for the Linux Kernel
SUSE-SU-2021:2202-1
Security update for the Linux Kernel
SUSE-SU-2021:2184-1
Security update for the Linux Kernel
ALT-PU-2021-2284
ALT-PU-2021-2284: package `kernel-image-mp` update to version 5.13.4-alt1
SUSE-SU-2022:3691-1
Security update for bluez
SUSE-SU-2022:3687-1
Security update for bluez
SUSE-SU-2021:2349-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
BDU:2021-05198 Уязвимость спецификации Bluetooth Core Specification ядра операционной системы Linux, связанная с недостатками процедуры аутентификации, позволяющая нарушителю получить доступ к конфиденциальным данным и нарушить их целостность | CVSS3: 4.2 | 1% Низкий | больше 5 лет назад | |
CVE-2020-26558 Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time. | CVSS3: 4.2 | 1% Низкий | больше 5 лет назад | |
CVE-2020-26558 Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time. | CVSS3: 4.2 | 1% Низкий | больше 5 лет назад | |
CVE-2020-26558 Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time. | CVSS3: 4.2 | 1% Низкий | больше 5 лет назад | |
CVSS3: 4.2 | 1% Низкий | больше 4 лет назад | ||
CVE-2020-26558 Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification ... | CVSS3: 4.2 | 1% Низкий | больше 5 лет назад | |
GHSA-7g33-jchx-2fjc Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time. | CVSS3: 4.2 | 1% Низкий | больше 4 лет назад | |
ELSA-2021-4432 ELSA-2021-4432: bluez security update (MODERATE) | 1% Низкий | почти 5 лет назад | ||
openSUSE-SU-2021:2291-1 Security update for bluez | больше 5 лет назад | |||
SUSE-SU-2021:2291-1 Security update for bluez | больше 5 лет назад | |||
ALT-PU-2021-2616 ALT-PU-2021-2616: package `kernel-image-un-def` update to version 5.13.9-alt1 | CVSS3: 8.8 | около 5 лет назад | ||
ALT-PU-2021-2486 ALT-PU-2021-2486: package `kernel-image-un-def` update to version 5.13.9-alt1 | CVSS3: 8.8 | около 5 лет назад | ||
openSUSE-SU-2021:2202-1 Security update for the Linux Kernel | больше 5 лет назад | |||
openSUSE-SU-2021:2184-1 Security update for the Linux Kernel | больше 5 лет назад | |||
SUSE-SU-2021:2202-1 Security update for the Linux Kernel | больше 5 лет назад | |||
SUSE-SU-2021:2184-1 Security update for the Linux Kernel | больше 5 лет назад | |||
ALT-PU-2021-2284 ALT-PU-2021-2284: package `kernel-image-mp` update to version 5.13.4-alt1 | CVSS3: 9.1 | больше 5 лет назад | ||
SUSE-SU-2022:3691-1 Security update for bluez | около 4 лет назад | |||
SUSE-SU-2022:3687-1 Security update for bluez | около 4 лет назад | |||
SUSE-SU-2021:2349-1 Security update for the Linux Kernel | больше 5 лет назад |
Уязвимостей на страницу