Vulnerability · Published Sep 7, 2021 · Assigned by mitre
CVE-2021-34145
Medium 5.3
In plain English
A medium-severity security flaw in the bluez-firmware package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMP_max_slot with an invalid Baseband packet type (and LT_ADDRESS and LT_ADDR) after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service (firmware crash) via a crafted LMP packet.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | bluez-firmware | 1.2-8 | DEBIAN-CVE-2021-34145 |
| Debian:13 | bluez-firmware | 1.2-8 | DEBIAN-CVE-2021-34145 |
| Debian:14 | bluez-firmware | 1.2-8 | DEBIAN-CVE-2021-34145 |
| Ubuntu:22.04:LTS | bluez-firmware | no fix listed | UBUNTU-CVE-2021-34145 |