VULN/vuln-ubuntu
1
0
Fork 0
Code Pull Requests Actions Activity
Files
main
vuln-ubuntu/data/osv/usn/USN-6540-1.json
T

368 lines
9.4 KiB
JSON
Raw Permalink Blame History

{
"schema_version": "1.7.0",
"id": "USN-6540-1",
"summary": "bluez vulnerability",
"details": "It was discovered that BlueZ did not properly restrict non-bonded devices\nfrom injecting HID events into the input subsystem. This could allow a\nphysically proximate attacker to inject keystrokes and execute arbitrary\ncommands whilst the device is discoverable.\n",
"aliases": [],
"upstream": [
"UBUNTU-CVE-2023-45866"
],
"related": [],
"published": "2023-12-07T04:07:20Z",
"modified": "2026-06-25T10:46:17Z",
"affected": [
{
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "bluez",
"purl": "pkg:deb/ubuntu/bluez@5.37-0ubuntu5.3+esm3?arch=source&distro=esm-infra/xenial"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.37-0ubuntu5.3+esm3"
}
]
}
],
"versions": [
"5.35-0ubuntu2",
"5.36-0ubuntu1",
"5.37-0ubuntu5",
"5.37-0ubuntu5.1",
"5.37-0ubuntu5.3",
"5.37-0ubuntu5.3+esm1",
"5.37-0ubuntu5.3+esm2"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "bluetooth",
"binary_version": "5.37-0ubuntu5.3+esm3"
},
{
"binary_name": "bluez",
"binary_version": "5.37-0ubuntu5.3+esm3"
},
{
"binary_name": "bluez-cups",
"binary_version": "5.37-0ubuntu5.3+esm3"
},
{
"binary_name": "bluez-hcidump",
"binary_version": "5.37-0ubuntu5.3+esm3"
},
{
"binary_name": "bluez-obexd",
"binary_version": "5.37-0ubuntu5.3+esm3"
},
{
"binary_name": "bluez-tests",
"binary_version": "5.37-0ubuntu5.3+esm3"
},
{
"binary_name": "libbluetooth3",
"binary_version": "5.37-0ubuntu5.3+esm3"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"cves": [
{
"id": "CVE-2023-45866",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}
}
},
{
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "bluez",
"purl": "pkg:deb/ubuntu/bluez@5.48-0ubuntu3.9+esm1?arch=source&distro=esm-infra/bionic"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.48-0ubuntu3.9+esm1"
}
]
}
],
"versions": [
"5.46-0ubuntu3",
"5.46-0ubuntu4",
"5.48-0ubuntu3",
"5.48-0ubuntu3.1",
"5.48-0ubuntu3.2",
"5.48-0ubuntu3.3",
"5.48-0ubuntu3.4",
"5.48-0ubuntu3.5",
"5.48-0ubuntu3.6",
"5.48-0ubuntu3.7",
"5.48-0ubuntu3.8",
"5.48-0ubuntu3.9"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "bluetooth",
"binary_version": "5.48-0ubuntu3.9+esm1"
},
{
"binary_name": "bluez",
"binary_version": "5.48-0ubuntu3.9+esm1"
},
{
"binary_name": "bluez-cups",
"binary_version": "5.48-0ubuntu3.9+esm1"
},
{
"binary_name": "bluez-hcidump",
"binary_version": "5.48-0ubuntu3.9+esm1"
},
{
"binary_name": "bluez-obexd",
"binary_version": "5.48-0ubuntu3.9+esm1"
},
{
"binary_name": "bluez-tests",
"binary_version": "5.48-0ubuntu3.9+esm1"
},
{
"binary_name": "libbluetooth3",
"binary_version": "5.48-0ubuntu3.9+esm1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"cves": [
{
"id": "CVE-2023-45866",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}
}
},
{
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "bluez",
"purl": "pkg:deb/ubuntu/bluez@5.53-0ubuntu3.7?arch=source&distro=focal"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.53-0ubuntu3.7"
}
]
}
],
"versions": [
"5.50-0ubuntu4",
"5.51-0ubuntu1",
"5.51-0ubuntu2",
"5.52-0ubuntu1",
"5.52-0ubuntu2",
"5.53-0ubuntu1",
"5.53-0ubuntu2",
"5.53-0ubuntu3",
"5.53-0ubuntu3.1",
"5.53-0ubuntu3.2",
"5.53-0ubuntu3.3",
"5.53-0ubuntu3.4",
"5.53-0ubuntu3.5",
"5.53-0ubuntu3.6"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "bluetooth",
"binary_version": "5.53-0ubuntu3.7"
},
{
"binary_name": "bluez",
"binary_version": "5.53-0ubuntu3.7"
},
{
"binary_name": "bluez-cups",
"binary_version": "5.53-0ubuntu3.7"
},
{
"binary_name": "bluez-hcidump",
"binary_version": "5.53-0ubuntu3.7"
},
{
"binary_name": "bluez-obexd",
"binary_version": "5.53-0ubuntu3.7"
},
{
"binary_name": "bluez-tests",
"binary_version": "5.53-0ubuntu3.7"
},
{
"binary_name": "libbluetooth3",
"binary_version": "5.53-0ubuntu3.7"
}
],
"availability": "No subscription required"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:20.04:LTS",
"cves": [
{
"id": "CVE-2023-45866",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}
}
},
{
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "bluez",
"purl": "pkg:deb/ubuntu/bluez@5.64-0ubuntu1.1?arch=source&distro=jammy"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.64-0ubuntu1.1"
}
]
}
],
"versions": [
"5.60-0ubuntu2",
"5.62-0ubuntu1",
"5.62-0ubuntu2",
"5.63-0ubuntu1",
"5.63-0ubuntu2",
"5.64-0ubuntu1"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "bluetooth",
"binary_version": "5.64-0ubuntu1.1"
},
{
"binary_name": "bluez",
"binary_version": "5.64-0ubuntu1.1"
},
{
"binary_name": "bluez-cups",
"binary_version": "5.64-0ubuntu1.1"
},
{
"binary_name": "bluez-hcidump",
"binary_version": "5.64-0ubuntu1.1"
},
{
"binary_name": "bluez-meshd",
"binary_version": "5.64-0ubuntu1.1"
},
{
"binary_name": "bluez-obexd",
"binary_version": "5.64-0ubuntu1.1"
},
{
"binary_name": "bluez-tests",
"binary_version": "5.64-0ubuntu1.1"
},
{
"binary_name": "libbluetooth3",
"binary_version": "5.64-0ubuntu1.1"
}
],
"availability": "No subscription required"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:22.04:LTS",
"cves": [
{
"id": "CVE-2023-45866",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}
}
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-6540-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2023-45866"
}
]
}
View Git Blame Copy Permalink