Skip to content
OpenAdvisories
Unscored CVE-2021-34147 EUVD-2021-20809GHSA-m739-9w4c-mx4g

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a…

Published Sep 7, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple reconnections to the link slave, allowing attackers to exhaust device BT resources and eventually trigger a crash via multiple attempts of sending a crafted LMP timing accuracy response followed by a sudden reconnection with a random BDAddress.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 bluez-firmware 1.2-8 —
Debian 13 bluez-firmware 1.2-8 —
Debian 12 bluez-firmware 1.2-8 —
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS bluez-firmware No fix yet —

References