Vulnerability · Published Dec 8, 2023 · Assigned by mitre
CVE-2023-45866
Medium 6.3
In plain English
A medium-severity security flaw in the bluez package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 7.9% (higher than 95% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bluez | 5.63-3.el8_10.alma.1 | ALSA-2024:11154 |
| AlmaLinux:9 | bluez | 5.72-2.el9 | ALSA-2024:9413 |
| AlmaLinux:8 | bluez-cups | 5.63-3.el8_10.alma.1 | ALSA-2024:11154 |
| AlmaLinux:9 | bluez-cups | 5.72-2.el9 | ALSA-2024:9413 |
| AlmaLinux:8 | bluez-hid2hci | 5.63-3.el8_10.alma.1 | ALSA-2024:11154 |
| AlmaLinux:8 | bluez-libs | 5.63-3.el8_10.alma.1 | ALSA-2024:11154 |
| AlmaLinux:9 | bluez-libs | 5.72-2.el9 | ALSA-2024:9413 |
| AlmaLinux:8 | bluez-libs-devel | 5.63-3.el8_10.alma.1 | ALSA-2024:11154 |
| AlmaLinux:9 | bluez-libs-devel | 5.72-2.el9 | ALSA-2024:9413 |
| AlmaLinux:8 | bluez-obexd | 5.63-3.el8_10.alma.1 | ALSA-2024:11154 |
| AlmaLinux:9 | bluez-obexd | 5.72-2.el9 | ALSA-2024:9413 |
| Debian:12 | bluez | 5.66-1+deb12u1 | DEBIAN-CVE-2023-45866 |
| Debian:12 | bluez | 5.66-1+deb12u1 | DSA-5584-1 |
| Debian:13 | bluez | 5.70-1.1 | DEBIAN-CVE-2023-45866 |
| Debian:14 | bluez | 5.70-1.1 | DEBIAN-CVE-2023-45866 |
| Rocky Linux:9 | bluez | 0:5.72-2.el9 | RLSA-2024:9413 |
| Ubuntu:22.04:LTS | bluez | 5.64-0ubuntu1.1 | USN-6540-1 |
| Ubuntu:22.04:LTS | bluez | 5.64-0ubuntu1.1 | UBUNTU-CVE-2023-45866 |
| Ubuntu:24.04:LTS | bluez | 5.70-0ubuntu3 | UBUNTU-CVE-2023-45866 |
Affected products (as reported)
References
- https://bluetooth.com
- http://changelogs.ubuntu.com/changelogs/pool/main/b/bluez/bluez_5.64-0ubuntu1/changelog
- https://github.com/skysafe/reblog/tree/main/cve-2023-45866
- https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/profiles/input?id=25a471a83e02e1effb15d5a488b3f0085eaeb675
- FEDORA-2023-6a3fe615d3 vendor-advisory
- FEDORA-2023-26a02512e1 vendor-advisory
- https://support.apple.com/kb/HT214036
- https://support.apple.com/kb/HT214035
- 20231212 APPLE-SA-12-11-2023-4 macOS Sonoma 14.2 mailing-list
- 20231212 APPLE-SA-12-11-2023-2 iOS 17.2 and iPadOS 17.2 mailing-list
- [debian-lts-announce] 20231215 [SECURITY] [DLA 3689-1] bluez security update mailing-list
- DSA-5584 vendor-advisory
- GLSA-202401-03 vendor-advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/77YQQS5FXPYE6WBBZO3REFIRAUJHERFA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2N2P5LMP3V7IJONALV2KOFL4NUU23CJ/