Summary
It was discovered that BlueZ did not properly restrict non-bonded devices
from injecting HID events into the input subsystem. This could allow a
physically proximate attacker to inject keystrokes and execute arbitrary
commands whilst the device is discoverable.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | bluez | 5.53-0ubuntu3.7 |
| Ubuntu · 22.04 LTS 22.04:LTS | bluez | 5.64-0ubuntu1.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | bluez | 5.37-0ubuntu5.3+esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | bluez | 5.48-0ubuntu3.9+esm1 |
Vulnerabilities 1
-
Unscored —CVE-2023-45866 Public exploit
Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encr…
References
-
report
https://ubuntu.com/security/CVE-2023-45866