VDB
BDU%3A2021-00474
BDU%3A2021-00474
PUBLISHED
CVSS 4.800000190734863 MEDIUM
Уязвимость реализации протокола согласования ключей шифрования Bluetooth BR/EDR, связанная с недостатками процедуры аутентификации, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации
Risk Scores
CVSS 2.0
4.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Bluetooth Special Interest Group, Сообщество свободного программного обеспечения | Suse Linux Enterprise Server, OpenSUSE Leap, Bluetooth BR/EDR, Linux |
Timeline
- Feb 2, 2021 CVE Published
- Sep 13, 2024 CVE Updated
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1832397 url
- https://bugzilla.suse.com/show_bug.cgi?id=1171988 url
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10135 url
- https://francozappa.github.io/about-bias/ url
- https://github.com/marcinguy/CVE-2020-10135-BIAS url
- https://kb.cert.org/vuls/id/647177 url
- https://kb.cert.org/vuls/id/647177/ url
- https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.202 url
- https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.152 url
- https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.240 url
- https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.240 url
- https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.72 url
- https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.2 url
- https://lkml.org/lkml/2020/10/15/98 url
- https://lore.kernel.org/linux-bluetooth/20200520212015.626026-2-luiz.dentz@gmail.com/T/#m3d2012da00716dc280e9725484e8ff1d640d03b5 url
- https://nvd.nist.gov/vuln/detail/CVE-2020-10135 url
- https://packetstormsecurity.com/files/157922/Bluetooth-Impersonation-Attack-BIAS-Proof-Of-Concept.html url
- https://ubuntu.com/security/notices/USN-4657-1 url
- https://ubuntu.com/security/notices/USN-4658-1 url
- https://ubuntu.com/security/notices/USN-4659-1 url
…and 12 more