p PatchFirst

CVE-2023-45866

CVE-2023-45866

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

CVSS 6.3 · Medium · EPSS 7.9% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • bluez Debian:12

    Versions
    • 5.66-1
    Affected ranges
    • ECOSYSTEM: < 5.66-1+deb12u1

    Update to 5.66-1+deb12u1

  • bluez Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.70-1.1

    Update to 5.70-1.1

  • bluez Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.70-1.1

    Update to 5.70-1.1

  • bluez Ubuntu:Pro:16.04:LTS

    Versions
    • 5.35-0ubuntu2
    • 5.36-0ubuntu1
    • 5.37-0ubuntu5
    • 5.37-0ubuntu5.1
    • 5.37-0ubuntu5.3
    • 5.37-0ubuntu5.3+esm1
    • 5.37-0ubuntu5.3+esm2
    Affected ranges
    • ECOSYSTEM: < 5.37-0ubuntu5.3+esm3

    Update to 5.37-0ubuntu5.3+esm3

  • bluez Ubuntu:Pro:18.04:LTS

    Versions
    • 5.46-0ubuntu3
    • 5.46-0ubuntu4
    • 5.48-0ubuntu3
    • 5.48-0ubuntu3.1
    • 5.48-0ubuntu3.2
    • 5.48-0ubuntu3.3
    • 5.48-0ubuntu3.4
    • 5.48-0ubuntu3.5
    • 5.48-0ubuntu3.6
    • 5.48-0ubuntu3.7
    • 5.48-0ubuntu3.8
    • 5.48-0ubuntu3.9
    Affected ranges
    • ECOSYSTEM: < 5.48-0ubuntu3.9+esm1

    Update to 5.48-0ubuntu3.9+esm1

  • bluez Ubuntu:20.04:LTS

    Versions
    • 5.50-0ubuntu4
    • 5.51-0ubuntu1
    • 5.51-0ubuntu2
    • 5.52-0ubuntu1
    • 5.52-0ubuntu2
    • 5.53-0ubuntu1
    • 5.53-0ubuntu2
    • 5.53-0ubuntu3
    • 5.53-0ubuntu3.1
    • 5.53-0ubuntu3.2
    • 5.53-0ubuntu3.3
    • 5.53-0ubuntu3.4
    • 5.53-0ubuntu3.5
    • 5.53-0ubuntu3.6
    Affected ranges
    • ECOSYSTEM: < 5.53-0ubuntu3.7

    Update to 5.53-0ubuntu3.7

  • bluez Ubuntu:22.04:LTS

    Versions
    • 5.60-0ubuntu2
    • 5.62-0ubuntu1
    • 5.62-0ubuntu2
    • 5.63-0ubuntu1
    • 5.63-0ubuntu2
    • 5.64-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 5.64-0ubuntu1.1

    Update to 5.64-0ubuntu1.1

  • bluez Ubuntu:24.04:LTS

    Versions
    • 5.68-0ubuntu1
    • 5.70-0ubuntu1
    • 5.70-0ubuntu2
    Affected ranges
    • ECOSYSTEM: < 5.70-0ubuntu3

    Update to 5.70-0ubuntu3

Original sources

Check your server →