Vulnerability · Published Sep 7, 2021 · Assigned by mitre
CVE-2021-34147
Medium 6.5
In plain English
A medium-severity security flaw in the bluez-firmware package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple reconnections to the link slave, allowing attackers to exhaust device BT resources and eventually trigger a crash via multiple attempts of sending a crafted LMP timing accuracy response followed by a sudden reconnection with a random BDAddress.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | bluez-firmware | 1.2-8 | DEBIAN-CVE-2021-34147 |
| Debian:13 | bluez-firmware | 1.2-8 | DEBIAN-CVE-2021-34147 |
| Debian:14 | bluez-firmware | 1.2-8 | DEBIAN-CVE-2021-34147 |
| Ubuntu:22.04:LTS | bluez-firmware | no fix listed | UBUNTU-CVE-2021-34147 |