8.1
CVE-2019-9506
- EPSS 2.69%
- Veröffentlicht 14.08.2019 17:15:11
- Zuletzt bearbeitet 21.11.2024 04:51:45
- Erkennungen
Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 19.04
Debian ≫ Debian Linux Version 8.0
Redhat ≫ Mrg Realtime Version 2.0
Redhat ≫ Virtualization Host Eus Version 4.2
Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Enterprise Linux Aus Version 7.5
Redhat ≫ Enterprise Linux Eus Version 7.6
Redhat ≫ Enterprise Linux Eus Version 7.7
Redhat ≫ Enterprise Linux Eus Version 8.1
Redhat ≫ Enterprise Linux Eus Version 8.2
Redhat ≫ Enterprise Linux Eus Version 8.4
Redhat ≫ Enterprise Linux For Real Time Version 7
Redhat ≫ Enterprise Linux For Real Time Version 8
Redhat ≫ Enterprise Linux For Real Time Eus Version 8.2
Redhat ≫ Enterprise Linux For Real Time Eus Version 8.4
Redhat ≫ Enterprise Linux For Real Time For Nfv Version 7
Redhat ≫ Enterprise Linux For Real Time For Nfv Version 8
Redhat ≫ Enterprise Linux For Real Time For Nfv Eus Version 8.2
Redhat ≫ Enterprise Linux For Real Time For Nfv Eus Version 8.4
Redhat ≫ Enterprise Linux Server Version 7.0
Redhat ≫ Enterprise Linux Server Aus Version 7.3
Redhat ≫ Enterprise Linux Server Aus Version 7.4
Redhat ≫ Enterprise Linux Server Aus Version 7.6
Redhat ≫ Enterprise Linux Server Aus Version 7.7
Redhat ≫ Enterprise Linux Server Aus Version 8.2
Redhat ≫ Enterprise Linux Server Aus Version 8.4
Redhat ≫ Enterprise Linux Server Tus Version 7.3
Redhat ≫ Enterprise Linux Server Tus Version 7.4
Redhat ≫ Enterprise Linux Server Tus Version 7.6
Redhat ≫ Enterprise Linux Server Tus Version 7.7
Redhat ≫ Enterprise Linux Server Tus Version 8.2
Redhat ≫ Enterprise Linux Server Tus Version 8.4
Redhat ≫ Enterprise Linux Tus Version 7.6
Huawei ≫ Alp-al00b Firmware Version < 9.1.0.333\(c00e333r2p1t8\)
Huawei ≫ Ares-al00b Firmware Version < 9.1.0.160\(c00e160r2p5t8\)
Huawei ≫ Ares-al10d Firmware Version < 9.1.0.160\(c00e160r2p5t8\)
Huawei ≫ Ares-tl00c Firmware Version < 9.1.0.165\(c01e165r2p5t8\)
Huawei ≫ Asoka-al00ax Firmware Version < 9.1.1.181\(c00e48r6p1\)
Huawei ≫ Atomu-l33 Firmware Version < 8.0.0.147\(c605custc605d1\)
Huawei ≫ Atomu-l41 Firmware Version < 8.0.0.153\(c461custc461d1\)
Huawei ≫ Atomu-l42 Firmware Version < 8.0.0.155\(c636custc636d1\)
Huawei ≫ Bla-al00b Firmware Version < 9.1.0.329\(c786e320r2p1t8\)
Huawei ≫ Bla-l29c Firmware Version < 9.1.0.300\(c605e2r1p12t8\)
Huawei ≫ Bla-tl00b Firmware Version < 9.1.0.329\(c01e320r1p1t8\)
Huawei ≫ Barca-al00 Firmware Version < 8.0.0.366\(c00\)
Huawei ≫ Berkeley-al20 Firmware Version < 9.1.0.333\(c00e333r2p1t8\)
Huawei ≫ Berkeley-l09 Firmware Version < 9.1.0.332\(c432e5r1p13t8\)
Huawei ≫ Berkeley-tl10 Firmware Version < 9.1.0.333\(c01e333r1p1t8\)
Huawei ≫ Cairogo-l22 Firmware Version < cairogo-l22c461b153
Huawei ≫ Charlotte-l29c Firmware Version < 9.1.0.311\(c605e2r1p11t8\)
Huawei ≫ Columbia-al10b Firmware Version < 9.1.0.333\(c00e333r1p1t8\)
Huawei ≫ Columbia-al10i Firmware Version < 9.1.0.335\(c675e8r1p9t8\)
Huawei ≫ Columbia-l29d Firmware Version < 9.1.0.350\(c10e5r1p14t8\)
Huawei ≫ Columbia-tl00d Firmware Version < 8.1.0.186\(c01gt\)
Huawei ≫ Cornell-al00a Firmware Version < 9.1.0.333\(c00e333r1p1t8\)
Huawei ≫ Cornell-al00i Firmware Version < 9.1.0.363\(c675e3r1p9t8\)
Huawei ≫ Cornell-al00ind Firmware Version < 8.2.0.141\(c675custc675d1gt\)
Huawei ≫ Cornell-al10ind Firmware Version < 9.1.0.363\(c675e2r1p9t8\)
Huawei ≫ Cornell-l29a Firmware Version < 9.1.0.336\(c636e2r1p12t8\)
Huawei ≫ Cornell-tl10b Firmware Version < 9.1.0.333\(c01e333r1p1t8\)
Huawei ≫ Dubai-al00a Firmware Version < 8.2.0.190\(c00r2p2\)
Huawei ≫ Dura-al00a Firmware Version < 1.0.0.182\(c00\)
Huawei ≫ Dura-tl00a Firmware Version < 1.0.0.176\(c01\)
Huawei ≫ Emily-l29c Firmware Version 8.1.0.156(c605)
Huawei ≫ Ever-l29b Firmware Version < 9.1.0.338\(c185e3r3p1\)
Huawei ≫ Figo-l23 Firmware Version < 9.1.0.160\(c605e6r1p5t8\)
Huawei ≫ Figo-l31 Firmware Version 8.0.0.122d(c652)
Huawei ≫ Figo-tl10b Firmware Version < 9.1.0.130\(c01e115r2p8t8\)
Huawei ≫ Florida-al20b Firmware Version < 9.1.0.128\(c00e112r1p6t8\)
Huawei ≫ Florida-l21 Firmware Version < 9.1.0.150\(c185e6r1p5t8\)
Huawei ≫ Florida-l22 Firmware Version < 9.1.0.150\(c636e6r1p5t8\)
Huawei ≫ Florida-l23 Firmware Version < 9.1.0.154\(c605e7r1p2t8\)
Huawei ≫ Florida-tl10b Firmware Version < 9.1.0.128\(c01e112r1p6t8\)
Huawei ≫ Honor 20 Firmware Version < 9.1.0.143\(c675e8r2p1\)
Huawei ≫ Honor 20 Pro Firmware Version < 9.1.0.154\(c185e2r5p1\)
Huawei ≫ Mate 20 Firmware Version -
Huawei ≫ Mate 20 Pro Firmware Version -
Huawei ≫ Mate 20 X Firmware Version -
Huawei ≫ P Smart Firmware Version -
Huawei ≫ P Smart 2019 Firmware Version -
Huawei ≫ P20 Firmware Version -
Huawei ≫ P20 Pro Firmware Version -
Huawei ≫ P30 Firmware Version -
Huawei ≫ P30 Pro Firmware Version -
Huawei ≫ Y5 2018 Firmware Version -
Huawei ≫ Y5 Lite Firmware Version -
Huawei ≫ Y6 2019 Firmware Version -
Huawei ≫ Y6 Prime 2018 Firmware Version -
Huawei ≫ Y6 Pro 2019 Firmware Version -
Huawei ≫ Y7 2019 Firmware Version -
Huawei ≫ Y9 2019 Firmware Version -
Huawei ≫ Nova 3 Firmware Version -
Huawei ≫ Nova 4 Firmware Version -
Huawei ≫ Nova 5 Firmware Version -
Huawei ≫ Nova 5i Pro Firmware Version -
Huawei ≫ Nova Lite 3 Firmware Version -
Huawei ≫ Harry-al00c Firmware Version -
Huawei ≫ Harry-al10b Firmware Version -
Huawei ≫ Harry-tl00c Firmware Version -
Huawei ≫ Hima-l29c Firmware Version -
Huawei ≫ Honor 10 Lite Firmware Version -
Huawei ≫ Honor 8a Firmware Version -
Huawei ≫ Honor 8x Firmware Version -
Huawei ≫ Honor View 10 Firmware Version -
Huawei ≫ Honor View 20 Firmware Version -
Huawei ≫ Jakarta-al00a Firmware Version -
Huawei ≫ Johnson-tl00d Firmware Version -
Huawei ≫ Johnson-tl00f Firmware Version -
Huawei ≫ Katyusha-al00a Firmware Version -
Huawei ≫ Laya-al00ep Firmware Version -
Huawei ≫ Leland-l21a Firmware Version -
Huawei ≫ Leland-l31a Firmware Version -
Huawei ≫ Leland-l32a Firmware Version -
Huawei ≫ Leland-l32c Firmware Version -
Huawei ≫ Leland-l42a Firmware Version -
Huawei ≫ Leland-l42c Firmware Version -
Huawei ≫ Leland-tl10b Firmware Version -
Huawei ≫ Leland-tl10c Firmware Version -
Huawei ≫ Lelandp-al00c Firmware Version -
Huawei ≫ Lelandp-al10b Firmware Version -
Huawei ≫ Lelandp-al10d Firmware Version -
Huawei ≫ Lelandp-l22a Firmware Version -
Huawei ≫ Lelandp-l22c Firmware Version -
Huawei ≫ Lelandp-l22d Firmware Version -
Huawei ≫ London-al40ind Firmware Version -
Huawei ≫ Madrid-al00a Firmware Version -
Huawei ≫ Madrid-tl00a Firmware Version -
Huawei ≫ Neo-al00d Firmware Version -
Huawei ≫ Paris-al00ic Firmware Version -
Huawei ≫ Paris-l21b Firmware Version -
Huawei ≫ Paris-l21meb Firmware Version -
Huawei ≫ Paris-l29b Firmware Version -
Huawei ≫ Potter-al00c Firmware Version -
Huawei ≫ Potter-al10a Firmware Version -
Huawei ≫ Princeton-al10b Firmware Version -
Huawei ≫ Princeton-al10d Firmware Version -
Huawei ≫ Princeton-tl10c Firmware Version -
Huawei ≫ Sydney-al00 Firmware Version -
Huawei ≫ Sydney-l21 Firmware Version -
Huawei ≫ Sydney-l21br Firmware Version -
Huawei ≫ Sydney-l22 Firmware Version -
Huawei ≫ Sydney-l22br Firmware Version -
Huawei ≫ Sydney-tl00 Firmware Version -
Huawei ≫ Sydneym-al00 Firmware Version -
Huawei ≫ Sydneym-l01 Firmware Version -
Huawei ≫ Sydneym-l03 Firmware Version -
Huawei ≫ Sydneym-l21 Firmware Version -
Huawei ≫ Sydneym-l22 Firmware Version -
Huawei ≫ Sydneym-l23 Firmware Version -
Huawei ≫ Tony-al00b Firmware Version -
Huawei ≫ Tony-tl00b Firmware Version -
Huawei ≫ Yale-al00a Firmware Version -
Huawei ≫ Yale-al50a Firmware Version -
Huawei ≫ Yale-l21a Firmware Version -
Huawei ≫ Yale-l61c Firmware Version -
Huawei ≫ Yale-tl00b Firmware Version -
Huawei ≫ Yalep-al10b Firmware Version -
Huawei ≫ Imanager Neteco Firmware Version -
Huawei ≫ Imanager Neteco 6000 Firmware Version -
Huawei ≫ Bla-l29c Firmware Version < 9.1.0.306\(c185e2r1p13t8\)
Huawei ≫ Bla-l29c Firmware Version < 9.1.0.306\(c432e4r1p11t8\)
Huawei ≫ Bla-l29c Firmware Version < 9.1.0.306\(c636e2r1p13t8\)
Huawei ≫ Bla-l29c Firmware Version < 9.1.0.307\(c635e4r1p13t8\)
Huawei ≫ Berkeley-l09 Firmware Version < 9.1.0.350\(c10e3r1p14t8\)
Huawei ≫ Berkeley-l09 Firmware Version < 9.1.0.350\(c636e4r1p13t8\)
Huawei ≫ Charlotte-l29c Firmware Version < 9.1.0.325\(c185e4r1p11t8\)
Huawei ≫ Charlotte-l29c Firmware Version < 9.1.0.325\(c636e2r1p12t8\)
Huawei ≫ Charlotte-l29c Firmware Version < 9.1.0.328\(c432e5r1p9t8\)
Huawei ≫ Charlotte-l29c Firmware Version < 9.1.0.328\(c782e10r1p9t8\)
Huawei ≫ Columbia-l29d Firmware Version < 9.1.0.350\(c185e3r1p12t8\)
Huawei ≫ Columbia-l29d Firmware Version < 9.1.0.350\(c461e3r1p11t8\)
Huawei ≫ Columbia-l29d Firmware Version < 9.1.0.350\(c636e3r1p13t8\)
Huawei ≫ Columbia-l29d Firmware Version < 9.1.0.351\(c432e5r1p13t8\)
Huawei ≫ Cornell-l29a Firmware Version < 9.1.0.341\(c185e1r1p9t8\)
Huawei ≫ Cornell-l29a Firmware Version < 9.1.0.342\(c461e1r1p9t8\)
Huawei ≫ Cornell-l29a Firmware Version < 9.1.0.347\(c432e1r1p9t8\)
Huawei ≫ Emily-l29c Firmware Version < 9.1.0.311\(c461e2r1p11t8\)
Huawei ≫ Emily-l29c Firmware Version < 9.1.0.325\(c185e2r1p12t8\)
Huawei ≫ Emily-l29c Firmware Version < 9.1.0.325\(c636e7r1p13t8\)
Huawei ≫ Emily-l29c Firmware Version < 9.1.0.326\(c635e2r1p11t8\)
Huawei ≫ Emily-l29c Firmware Version < 9.1.0.328\(c432e7r1p11t8\)
Huawei ≫ Figo-l31 Firmware Version < 9.1.0.122\(c09e7r1p5t8\)
Huawei ≫ Figo-l31 Firmware Version < 9.1.0.137\(c33e8r1p5t8\)
Huawei ≫ Figo-l31 Firmware Version < 9.1.0.137\(c530e8r1p5t8\)
Huawei ≫ Figo-l31 Firmware Version < 9.1.0.158\(c432e8r1p5t8\)
Huawei ≫ Figo-l31 Firmware Version < 9.1.0.165\(c10e8r1p5t8\)
Huawei ≫ Florida-l21 Firmware Version < 9.1.0.150\(c432e6r1p5t8\)
Huawei ≫ Honor 20 Firmware Version < 9.1.0.149\(c675e8r2p1\)
Huawei ≫ Honor 20 Pro Firmware Version < 9.1.0.154\(c185e2r5p1\)
Huawei ≫ Honor 20 Pro Firmware Version < 9.1.0.154\(c432e2r5p1\)
Huawei ≫ Honor 20 Pro Firmware Version < 9.1.0.154\(c636e2r3p1\)
Huawei ≫ Honor 20 Pro Firmware Version < 9.1.0.155\(c10e2r3p1\)
Huawei ≫ Honor 20 Pro Firmware Version < 9.1.0.170\(c185e2r5p1\)
Huawei ≫ Honor 20 Pro Firmware Version < 9.1.0.170\(c636e2r3p1\)
Huawei ≫ Honor 20 Pro Firmware Version < 9.1.0.171\(c10e2r3p1\)
Huawei ≫ Honor 20 Pro Firmware Version < 9.1.0.172\(c432e2r5p1\)
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.69% | 0.844 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 8.1 | 2.8 | 5.2 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
| NIST | 4.8 | 6.5 | 4.9 |
AV:A/AC:L/Au:N/C:P/I:P/A:N
|
| CERT.org | 7.6 | 2.8 | 4.7 |
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
|
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
https://access.redhat.com/errata/RHSA-2019:3517
https://usn.ubuntu.com/4118-1/
https://access.redhat.com/errata/RHSA-2019:3217
https://access.redhat.com/errata/RHSA-2019:3309
https://access.redhat.com/errata/RHSA-2020:0204
https://usn.ubuntu.com/4115-1/
https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html
https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html
https://access.redhat.com/errata/RHSA-2019:3220
https://access.redhat.com/errata/RHSA-2019:3055
https://access.redhat.com/errata/RHSA-2019:3076
https://access.redhat.com/errata/RHSA-2019:3089
http://seclists.org/fulldisclosure/2019/Aug/11
https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html
https://usn.ubuntu.com/4147-1/
http://seclists.org/fulldisclosure/2019/Aug/13
http://seclists.org/fulldisclosure/2019/Aug/14
http://seclists.org/fulldisclosure/2019/Aug/15
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html
http://www.cs.ox.ac.uk/publications/publication12404-abstract.html
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190828-01-knob-en
https://access.redhat.com/errata/RHSA-2019:2975
https://access.redhat.com/errata/RHSA-2019:3165
https://access.redhat.com/errata/RHSA-2019:3187
https://access.redhat.com/errata/RHSA-2019:3218
https://access.redhat.com/errata/RHSA-2019:3231
https://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth/
https://www.kb.cert.org/vuls/id/918987/
https://www.usenix.org/conference/usenixsecurity19/presentation/antonioli